3 Greenbone Enterprise Appliance – Overview¶
The Greenbone Enterprise Appliance is a dedicated appliance for vulnerability scanning and vulnerability management. It is offered in different performance levels.
3.1 Hardware Appliances¶
Tip
A full product overview of all Greenbone Enterprise Appliances can be found here.
3.1.1 Large Organizations – Greenbone Enterprise 5400/6500¶
The Greenbone Enterprise 5400 and Greenbone Enterprise 6500 are designed for the operation in large organizations.
Fig. 3.1 Greenbone Enterprise Appliance for large organizations¶
They can control other appliances as sensors and can also be controlled as remote scanners by other appliances.
The appliances come in a 2U 19” chassis for easy integration into the data center. For simple installation and monitoring, they are equipped with a two-line LC display with 16 characters per line. For uninterruptible operation, they have redundant, hot-swappable power supplies, 4 solid-state drives (SSDs) and fans.
The appliances use RAID (Redundant Array of Independent Disks) 6 as a software RAID. RAID is a data storage virtualization technology that combines multiple HDD components into one or more logical units for the purposes of data redundancy.
For managing the appliance, a serial port is available, in addition to two out-of-band management Ethernet ports (RJ45).
To connect to other systems, the appliances come with a built-in module with 8 RJ45 Ethernet ports. Additionally, the appliances can be equipped with up to three more modules. The following modules can be used in any order:
Module(s) with 8 ports RJ45 (copper)
Module(s) with 8 ports 1 GbE SFP (Small Form-factor Pluggable)
Module(s) with 2 ports 10 GbE SFP+ (Enhanced Small Form-factor Pluggable)
3.1.2 Medium-Sized Organizations and Branches – Greenbone Enterprise 400/450/600/650¶
The Greenbone Enterprise 400, Greenbone Enterprise 450, Greenbone Enterprise 600 and Greenbone Enterprise 650 are designed for medium-sized organizations and larger branch offices.
Fig. 3.2 Greenbone Enterprise Appliance for medium-sized organizations¶
They can control other appliances as sensors and can also be controlled as remote scanners by other appliances.
The appliances come in a 1U 19” chassis for easy integration into the data center. For simple installation and monitoring, they are equipped with a two-line LC display with 16 characters per line. For uninterruptible operation, the appliances come with redundant fans.
For managing the appliance, a serial port is available in addition to a management Ethernet port. The serial port is set up as a Cisco-compatible console port.
To connect to other systems, the appliances are equipped with ten ports in total, pre-configured and set up as follows:
8 ports RJ45 (copper)
2 ports 10 GbE SFP+ (Enhanced Small Form-factor Pluggable)
A modular configuration of the ports is not possible. One of these ports is also used as management port.
3.1.3 Small Organizations and Branches – Greenbone Enterprise 150¶
The Greenbone Enterprise 150 is designed for small organizations as well as for small to medium-sized branch offices.
Controlling sensors in other security zones is not considered. However, the Greenbone Enterprise 150 itself can be controlled as a remote scanners by other appliances.
Fig. 3.3 Greenbone Enterprise Appliance for small organizations¶
The appliance comes in a 1U 19” chassis for easy integration into the data center. For simple installation and monitoring, it is equipped with a two-line LC display with 16 characters per line. For uninterruptible operation, the appliance comes with redundant fans.
For managing the appliance, a serial port is available in addition to a management Ethernet port. The serial port is set up as a Cisco-compatible console port.
To connect to other systems, the appliance is equipped with ten ports in total, pre-configured and set up as follows:
8 ports RJ45 (copper)
2 ports 10 GbE SFP+ (Enhanced Small Form-factor Pluggable)
A modular configuration of the ports is not possible. One of these ports is also used as management port.
3.1.4 Sensor – Greenbone Enterprise 35¶
The Greenbone Enterprise 35 is designed as a sensor for distributed scan systems.
Fig. 3.4 Hardware sensor¶
The appliance can only be used in sensor mode and has to be managed via a master appliance. For this reason, it does not have a web interface itself. Appliances from Greenbone Enterprise 400/DECA can be utilized as masters for the Greenbone Enterprise 35.
The appliance comes in a 1U steel chassis. For easy integration into the data center, an optional rackmount kit can be used. The appliance does not come with a display.
For managing the appliance, a serial port is available in addition to a management Ethernet port. The serial port is set up as a Cisco-compatible console port.
To connect to other systems, the appliance comes with four GbE-Base-TX (copper) ports in total. One of these ports is also used as management port.
3.2 Virtual Appliances¶
Tip
A full product overview of all Greenbone Enterprise Appliances can be found here.
3.2.1 Medium-Sized Organizations and Branches – Greenbone Enterprise DECA/TERA/PETA/EXA¶
The Greenbone Enterprise DECA, Greenbone Enterprise TERA, Greenbone Enterprise PETA and Greenbone Enterprise EXA are designed for medium-sized organizations and larger branch offices.
Fig. 3.5 Greenbone Enterprise Appliance for medium-sized organizations¶
They can control other appliances as sensors and can also be controlled as remote scanners by other appliances.
To connect to other systems, the appliances come with eight dynamic, virtual ports in total in case of the Greenbone Enterprise TERA/PETA/EXA, or with four dynamic, virtual ports in total in case of the Greenbone Enterprise DECA.
One of these ports is also used as management port.
3.2.2 Small Organizations – Greenbone Enterprise CENO¶
The Greenbone Enterprise CENO is designed for small organizations as well as for small to medium-sized branch offices.
Controlling sensors in other security zones is not considered. However, the Greenbone Enterprise CENO itself can be controlled as a remote scanners by other appliances.
To connect to other systems, the appliance comes with four dynamic, virtual ports in total.
One of these ports is also used as management port.
3.2.3 Sensor – Greenbone Enterprise 25V¶
The Greenbone Enterprise 25V is designed as a sensor for distributed scan systems.
The appliance can only be used in sensor mode and has to be managed via a master appliance. For this reason, it does not have a web interface itself. Appliances from Greenbone Enterprise 400/DECA can be utilized as masters for the Greenbone Enterprise 25V.
To connect to other systems, the appliance comes with four dynamic, virtual ports in total.
One of these ports is also used as management port.
3.2.4 Entry-Level Solution – Greenbone Basic Appliance¶
The Greenbone Basic Appliance is designed as an entry-level appliance with a reduced feature set. It can neither control other appliances as sensors nor be controlled as a sensor by another appliance.
The appliance comes with one virtual port used for management, scan and updates.
Note
It is required to use the Greenbone Basic Appliance with the Greenbone Enterprise Feed. Using the Greenbone Community Feed is not possible.
For the Greenbone Basic Appliance, a Greenbone Enterprise Feed subscription key does not include access to the Greenbone Enterprise Support by default. Access must be purchased separately. For further details, contact sales@greenbone.net.
3.2.5 Entry-Level Solution – Greenbone Enterprise ONE¶
The Greenbone Enterprise ONE is designed as an entry-level appliance with a reduced feature set. It can neither control other appliances as sensors nor be controlled as a sensor by another appliance.
The appliance comes with one virtual port used for management, scan and updates.