Nexpose

View as Markdown

Community Platform

runZero integrates with Rapid7 Nexpose by importing report files exported from your Nexpose instance.

Getting started with Rapid7 Nexpose

To use the Rapid7 Nexpose integration, you’ll need to:

  1. Download an XML Export or XML Export 2.0 report from Nexpose.
  2. Import the Nexpose files through the inventory pages.

Requirements

Before you set up the Nexpose integration:

  • Make sure you have access to the Nexpose portal.

Step 1: Export Nexpose vulnerability scan report

  1. Sign in to Nexpose with the account you use for the runZero integration.
  2. Go to the Reports page and select Create a report.
  3. From the Export tab, select either XML Report or XML Report 2.0.
  4. Set the scan, asset, asset group, or site scope.
  5. Click Save & Run the Report.
  6. When the report completes, save it to a local file.

Step 2: Import the Nexpose files into runZero

  1. Go to the Inventory page in runZero.
  2. Choose Import > Nexpose XML Export (.xml) from the list of import types.
  3. On the import data page:
    • Choose the site to add your assets to.
    • Set tags to apply to the imported assets (optional).
    • Set the severity and risk levels to ingest (optional).
    • Set the Fingerprint only toggle to Yes to ingest vulnerability records for fingerprint analysis without storing them in your runZero vulnerability inventory (optional).

Step 3: View Nexpose assets and vulnerabilities

After a successful import, go to your inventory to view your Nexpose assets. They show a Rapid7 icon in the Source column.

The integration also gathers the vulnerabilities Nexpose detected. Go to Inventory > Vulnerabilities to view the vulnerability data from Nexpose. To search and filter those results, use the vulnerability instance inventory keywords.

To filter to Rapid7 assets, run this query:

Click an asset to see its attributes. runZero shows the attributes gathered from the Nexpose scan file.

Troubleshooting

If you are having trouble with this integration, the questions and answers below may help.

Why is the Rapid7 Nexpose integration unable to connect?

  1. Check whether the Rapid7 Nexpose integration is returning any data.
    • Query the inventory rather than the task details to review all the data available from this integration.
    • In some cases, an integration’s configuration limits how much data reaches the runZero console.
  2. Some integrations require specific actions that are easy to overlook. If you miss a step during setup, the integration may not work correctly. Review this page and follow the steps exactly.
  3. If the Rapid7 Nexpose integration can’t connect, check the task log for errors. Common errors include:
    • 500: server error, unable to connect to the endpoint
    • 404: hitting an unknown endpoint on the server
    • 403: not authorized, likely a credential issue
  4. Verify that the integration task runs from an Explorer with access to the Nexpose host.
Updated