4 Managing OPENVAS Products¶

OPENVAS products are delivered by Greenbone as a virtual machine containing the OpenSight Operating System (OpenSight OS) and a certificate which authorizes the users to install OPENVAS products.

To use OPENVAS products, users must download and install the products themselves as described in this chapter.

Note

Only an OPENVAS product included in the certificate can be installed.

For OpenSight OS installations on Microsoft Hyper-V, the setting Processor compatibility must be disabled in order to successfully install any OPENVAS product. More information can be found here.

4.1 Listing all Available OPENVAS Products¶

Retrieve a list of available products and versions by running the following command:

opensight-os-cli container-management list-products

→ The output shows the product(s) available for installation:

Note

The value after id: is needed for the installation step.

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1084
Content-Type: application/json
Date: Tue, 29 Apr 2025 10:02:15 GMT
Server: nginx

- available_versions:
  - 1.3.1
  - 1.3.0
  - 1.2.0
  description: OpenSight Asset is a Greenbone appliance product that collects scan
    data about assets and vulnerabilities into a unified reporting from all Greenbone
    Enterprise Appliances in a customer infrastructure. It provides an asset-centric
    view across all networks, all assets and all scans including extensive filtering
    and dashboarding and is designed for high performance response for large data
    sets. Once connected to the scanning appliances, data are imported continuously
    and automatically.
  id: asset
  installed_version: null
  name: OpenSight Asset
- available_versions:
  - 1.1.7
  - 1.1.6
  - 1.1.5
  description: OpenSight Lookout is the central service about information on vulnerabilities,
    essentially consisting of security advisories and details about our vulnerability
    tests. All information are delivered via a continuously updated Feed. It can be
    used together with OpenSight Asset or as a stand-alone application, being the
    new 'SecInfo'.
  id: lookout
  installed_version: null
  name: OpenSight Lookout
- available_versions:
  - 1.0.0
  - 0.0.4
  description: OPENVAS SECURITY INTELLIGENCE combines the functionalities of OPENVAS
    REPORT, OPENVAS VIEW and OPENVAS CONTROL into a unified product.
  id: security-intelligence
  installed_version: null
  name: OPENVAS SECURITY INTELLIGENCE

4.2 Installing OPENVAS Products¶

Note

The product compose files of the OPENVAS products will be downloaded from packages.greenbone.net. If a download is not possible, the firewall settings may need to be configured accordingly.

Install a product by running the following command:

opensight-os-cli container-management install-product <PRODUCT_ID>

The following table shows which ID must be used for which product:

Product Name	Container Name	Product ID
OPENVAS REPORT	OpenSight Asset	asset
OPENVAS VIEW	OpenSight Lookout	lookout
OPENVAS SECURITY INTELLIGENCE	OPENVAS SECURITY INTELLIGENCE	security-intelligence

Note

The installation may take a while. When the installation is finished, a CLI output will be displayed.

→ The output shows product information as well as the installed version:

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1084
Content-Type: application/json
Date: Tue, 29 Apr 2025 10:02:15 GMT
Server: nginx

- available_versions:
  - 0.1.4
  - 0.1.3
  - 0.1.2
  description: OpenSight Asset is a Greenbone appliance product that collects scan
    data about assets and vulnerabilities into a unified reporting from all Greenbone
    Enterprise Appliances in a customer infrastructure. It provides an asset-centric
    view across all networks, all assets and all scans including extensive filtering
    and dashboarding and is designed for high performance response for large data
    sets. Once connected to the scanning appliances, data are imported continuously
    and automatically.
  id: asset
  installed_version: 0.1.4
  name: OpenSight Asset

Note

It is recommended to try accessing the product’s web interface even if the output contains error messages.

4.3 Updating OPENVAS Products¶

Note

To keep the OPENVAS products up-to-date and secure, available updates should be regularly checked and installed.

Update a product by running the following command:

opensight-os-cli container-management upgrade-product <PRODUCT_ID>

Example:

opensight-os-cli container-management upgrade-product asset

4.4 Removing OPENVAS Products¶

Remove an OPENVAS product by running the following command:

opensight-os-cli container-management uninstall-product <PRODUCT_ID>

Example:

opensight-os-cli container-management uninstall-product asset