- 16 Mar 2023
- 4 Minutes to read
-
Print
-
DarkLight
-
PDF
Rapid7 Nexpose and InsightVM - Add IP Addresses to Site
- Updated on 16 Mar 2023
- 4 Minutes to read
-
Print
-
DarkLight
-
PDF
Rapid7 Nexpose and InsightVM - Add IP Addresses to Site (Add IPs to Rapid7 InsightVM Site) adds IP addresses retrieved from the saved query supplied as a trigger (or from devices selected in the asset table), to an existing Rapid7 InsightVM site.
A Rapid7 InsightVM site is a collection of assets that are targeted for a scan.
See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.
General Settings
- Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonious. You can change the name according to your needs.
- Add description (optional) - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
- Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
- A query only returns results for the asset type it was created for.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs and Adapter Fetch History Modules
- Action name - The name of the Main action. A default value is added by Axonious. You can change the name according to your needs.
- Configure Action Conditions - Toggle on to enter a condition statement. See Configuring Enforcement Action Conditions to learn more about condition statement syntax.
Connection Settings
- Use stored credentials from the Rapid7 adapter (required, default: True) - Select this option to use the the first connected Rapid7 adapter credentials.
- Rapid7 InsightVM domain (optional, default: empty) - The hostname or IP address of the Rapid7 InsightVM server.
If Use stored credentials from the Rapid7 Adapter is disabled, this field is required.
- Port (optional, default: empty) - Use port 3780.
If Use stored credentials from the Rapid7 InsightVM Adapter is disabled, this field is required.
- User name and Password (optional, default: empty) - The credentials for a user account that has the has the permissions to update a site.
If Use stored credentials from the Rapid7 InsightVM Adapter is disabled, this field is required.
- Verify SSL (required, default: False) - Verify the SSL certificate offered by the host supplied in Rapid7 InsightVM domain. For more details, see SSL Trust & CA Settings.
- If enabled, the SSL certificate offered by the host will be verified against the CA database inside of Axonius. If it fails validation, the connection will fail with an error.
- If disabled, the SSL certificate offered by the host will not be verified against the CA database inside of Axonius.
- HTTPS proxy (optional, default: empty) - A proxy to use when connecting to Rapid7 InsightVM domain.
- If supplied, Axonius will utilize the proxy when connecting to the host defined for this connection.
- If not supplied, Axonius will connect directly to the host defined for this connection.
- HTTPS proxy user name (optional, default: empty) - The user name to use when connecting to the value supplied in Rapid7 InsightVM domain via the value supplied in HTTPS proxy.
- If supplied, Axonius will authenticate with this value when connecting to the value supplied in HTTPS proxy.
- If not supplied, Axonius will not perform authentication when connecting to the value supplied in HTTPS proxy.
- HTTPS proxy password (optional, default: empty) - The password to use when connecting to the value supplied in Rapid7 InsightVM domain via the value supplied in HTTPS proxy.
- If supplied, Axonius will authenticate with this value when connecting to the value supplied in HTTPS proxy.
- If not supplied, Axonius will not perform authentication when connecting to the value supplied in HTTPS proxy.
Action Settings
- Site name (required, default: empty) - Specify the Rapid7 InsightVM site name to be updated.
- Use public IP addresses (required, default: True) - Select whether to add public IP addresses to Rapid7 InsightVM.
- If enabled, Axonius will add public IP addresses to Rapid7 InsightVM.
- If disabled, Axonius will not add public IP addresses to Rapid7 InsightVM.
- Use private IP addresses (required, default: True) - Select whether to add private IP addresses to a Rapid7 InsightVM site.
- If enabled, Axonius will add private IP addresses to a Rapid7 InsightVM site.
- If disabled, Axonius will not add private IP addresses to a Rapid7 InsightVM site.
- Exclude IPv6 addresses (required, default: False) - Select whether to add IPv6 addresses to the Rapid7 InsightVM site.
- If enabled, Axonius will add only IPv4 addresses to the Rapid7 InsightVM site.
- If disabled, Axonius will add both IPv4 and IPv6 addresses to the Rapid7 InsightVM site.
- CIDRs exclude list (optional, default: empty) - Specify a comma-separated list of CIDRs to be excluded.
- If supplied, Axonius will not add to the Rapid7 InsightVM site IP addresses in the IP range of the specified CIDRs.
- If not supplied Axonius will add to the Rapid7 InsightVM site. IP addresses in any IP range.
- Override site IPs (optional, default: empty) - Select whether to override the IP addresses of the Rapid7 InsightVM site.
- If enabled, Axonius will overwrite the IP addresses on the Rapid7 InsightVM site.
- If disabled, Axonius will add the IP addresses to the Rapid7 InsightVM site.
- Source Adapter (optional, default: empty) - Specify an adapter name as it appears in Axonius (as in the Axonius URL) in order to send specific adapter IP data.
- If supplied, it will send adapter IP data only from the adapter listed.
- If not supplied it will send adapter IP data from all adapters.
- Add Hostnames names to scan - Select whether to send the hostname name as well as the IP address to the Rapid7 InsightVM site.
For more details about other Enforcement Actions available, see Action Library.