This section explains how to launch a vulnerability scan. SGBox uses, by default, the OpenVAS engine to test vulnerabilities on host groups (assets).
To run it, you need to:

Requirements:

• OpenVAS must be configured. Look This section to see how to configure OpenVAS.
• A asset must be prepared to OpenVAS. Look this to see how to prepare an asset to NVS.

Connect to the SGBox web interface.
SGBOX > NVS > Scan > Scan

Click on the Scan button of the asset on which you want to perform the vulnerability test.

Once the scan has been successfully completed, Successful Scan will appear. The results of the scan can be seen in the section:
SGBOX > NVS > Report .

This article explains how to prepare an asset to NVS. In this way, the hosts that are part of it, can be used as target of the scan test. For more information about the assets, look the article that explains how to create an asset.

Requirements:

• The asset must be created. Look this section to see how to create it.

Connect to the SGBox web interface.
SGBOX > SCM > Network > Asset

Click on Edit button of the asset you want to modify. In our caseAsset1.

Asset configuration window is shown.
In Assign Module tab, select Network Vunerability Scanner and click on ADD.

In Assign NVS Policy tab, select the network on which our hosts belong and the policy you want to use.
In our case, the previously created policy: Openvas Default Scan. Click on Modify to save changes.