Image Removed

Image Added

📙 You will learn

How to create a ThreadFix report from InsightVM.

Prerequisites

Audience: IT Professional or End User
Difficulty: Basic
Time needed: Approximately 5 minutes
Tools required: N/A

Generate an InsightVM Report

1. Navigate to the Reports page from the Navigation sidebar. Note the Reports page icon highlighted below:
   

   

2. By default the Reports page displays a current set of viewable reports.
   

   

3. Create a new report by clicking the Create a report button and enter a name for the report. Select the appropriate time zone from the Report time zone drop-down list.
   

4. Scroll down to the Template menu and click on the Export tab. Use the navigation arrows, click on see all, or enter “XML Export 2.0” into the search bar to find the XML Export 2.0 option. Once found, click on the report, it will display a blue and white icon with a checkmark indicating it is “Selected”.
   

   

5. To define the the report’s scope, first scroll down to the Scope section and click on the Select Sites, Assets, Asset Groups or Tags button.
   

   

   
   See the highlighted image below:

   

6. A Select Report Scope pop-up modal with appear. Select all sites generated by ThreadFix Network and click the Done button.
   

   

7. The reporting frequency can be selected by scrolling down to the Frequency section. From the frequency drop-down list, select the desired reporting frequency rate and click either the SAVE & RUN THE REPORT button or SAVE THE REPORT button. Note: if the report is not on a schedule, it will not be generated if the SAVE THE REPORT button is clicked.
   

   

   See the highlighted image below:
   

   

Report Format Requirements

• The InsightVM integration only allows imports of reports in a xml-export-v2 format in order to be ingested by ThreadFix. InsightVM reports can be scoped at the site/asset group/asset level and include a list of all relevant scans for specified the scope.

• The name of the report is configurable when creating/editing the provider configuration however the configured report must be in a xml-export-v2 format.

• When parsing the report, ThreadFix will use the latest start date of all listed scans for the scan date though scans that are not complete will not be included.

Configure Reports

ThreadFix, as of version 3.0.8, contains the following Add Provider menu that can be used for InsightVM configuration. To add a provider, a Name, URL, Username, Password, and Report Name need to be entered. On completion, click the Save button.