Adding the Full Scan Plus Scan Policy to JSA Vulnerability Manager
To add the Full Scan Plus scan policy to JSA Vulnerability Manager, you must download the QVM Engine for OpenVAS NVTs RPM Package Manager (RPM) from IBM Fix Central and install it on your JSA Console.
Ensure you have JSA 7.3.1, Patch 3 or later installed.
Ensure the JSA Vulnerability Manager processor and scanner are enabled.
- Download the RPM from IBM Fix Central and save it in
/store/rpmsdirectory on the Console.
- Type the following command to install the RPM on the JSA Console:
rpm -ivh /store/rpms/qvm-openvas-x.x-x.noarch.rpm
In a High Availability environment, perform this step only on the primary console.
- Type the following command to enable the Full Scan Plus
/store/qvm/openvas/ openvas_switch.sh enable
Complete this step on the Console only. This step deploys the configuration to the entire system. No actions are required on Managed Hosts.
- Run automatic updates by performing the following tasks:
On the navigation menu, click Admin to open the admin tab.
In the System Configuration section, click Auto Update.
Click Get New Updates.
If new updates appear on the list, click Install > All Updates.
You must trigger Auto Update to complete the installation of the Full Scan Plus policy. At this time, additional tools are downloaded and installed. The scan policy will be available in the UI after this installation is complete. You must carry out this step, even if Auto Update has already run for the current day.