Integrate findings from Nessus on-premise into Autobahn Fit

Ingest data from Nessus on-premise installations into Autobahn Fit using internal satellites

By integrating Nessus on-premise with Autobahn Fit, you can view all your scan information in one platform. This includes full-fledged remediation guides for issues identified by Nessus. Imported scans will be conveniently displayed on the Scan page for easy access and management.

To set up this integration, you must install an internal satellite that will regularly pull data from your on-premise Nessus installation(s).

1. Nessus setup

1.1. Get Nessus API server URL
1.2. Create Nessus username and password

2. Autobahn Fit setup

2.1. Install Autobahn worker
2.2. Install Docker Image
2.3. Install the integration satellite
2.4. Allow outbound connections

3. View your pulled scans on Scans page

4. Enable/Disable active instances

1.1. Get Nessus API server URL

1 - Login into your Nessus account.

2 - Navigate to the Settings page. You will be directed to the About tab.

3 - Open the My Account tab.

4 - On the My Account tab, click the Generate button.  

A dialog box appears, confirming your selection to generate a new API key. Click the Generate button to confirm. A URL will be generated, copy the one with `api`.

Example value: http://102.185.1.5:8814

1.2. Create a Nessus username and password

If you already have an existing Nessus user, you can use the credentials to integrate your Nessus account. Otherwise, follow these steps to create a new username and password:

1 - Log into your Nessus account.

2 - In the top navigation bar, click Settings.

3 - The About page appears, in the left navigation bar, click the My Account button.

4 - In the upper right corner of Users page, click the New User button.

5 - Fill the necessary fields.

6 - Select a role for the user. The minimum requirements for this account are Read/Run reports.

7 - Save the username and password that you use.

8 - Click Save to save the new user. Your account will appear on the account list.

2. Integrate Nessus with Autobahn Fit

1- After you collect the required credentials, log into your Autobahn Fit account and navigate to the Integrations page.

2 - Click Configure on the Tenable - Nessus Internal Satellites card.

4 - You will be directed to Configure an integration page. Click the Add instance button.

A form to add your instance credentials will appear. Fill out the form accordingly.

• Label: Label to differentiate the different instances.
• API server: The path or URL that redirects to the API server of your Nessus installation.
• Username: The minimum permission of the user you are using for the Autobahn integration is Read/Run Reports.
• Password: Password for the user.
• Network: Currently, only an internal network is available.
• Pull from: The date of the scans to be pulled from. For example: if you select 10 January 2023, all scans that were created from 10 January 2023 onwards will be imported.
• Frequency: The pulling frequency and how often the Autobahn Fit engine pulls the data.

8 - Once filled, click the Save button to save the instance.

You need to download the Autobahn Fit worker after adding your instance(s). The worker can then collect Nessus data and push it to Autobahn Fit's cloud. This avoids having to make any firewall changes to allow inbound connections.

1 - Click the download icon in the instance card on the Integration page.

2 - Install the downloaded Autobahn Fit worker in the same network as your Nessus probe.

2.2. Install Docker Image

$ sudo apt install docker.io

$ sudo groupadd docker

$ sudo usermod -aG docker ${USER}

$ docker ps

 $ unzip instance_name.zip

 $ cd integration_satellite

$ ./autobahn_probe.sh run

$ ./autobahn_probe.sh run

$ ./autobahn_probe.sh stop

 $ ./autobahn_probe.sh uninstall

 ./autobahn_probe.sh help