Scanning Network Devices

[vanessa_villalpando]

Anyone have any advice on scanning network devices(switches, routers, and F5 Load balancer); can they be authenticated? Is it the same as opening ports on the server with 135 445 139 or for linux ssh 22?

[Adrian (AdyB)]

Just ensure you have credentials with administrative access on network devices, add them to insightVM shared scan credentials and you’ll get vulnerabilities for network devices

[srikanth_kan]

Yes, we were able to scan Cisco, F5 and Linux appliances using SSH service on IVM with root creds.

[vanessa_villalpando]

• Rapid7 insightvm be used to do VM on Infoblox and Cisco ISE and Cisco Stealthwatch?

[jmeyers]

@Adrian

add them to insightVM shared scan credentials and you’ll get vulnerabilities for network devices

Does Rapid7 IVM have any requirements in terms of access/privilege level the service accounts need on the network devices? For example, Cisco devices, does the account need privilege level 15? Also, interested in Fortiguard firewalls.