Tenable Security Center API: Scan Policy Templates

{
	"type" : "regular",
	"response" : [
		{
			"id" : "2",
			"name" : "Host Discovery",
			"description" : "A simple scan to discover live hosts and open ports."		},
		{
			"id" : "3",
			"name" : "Basic Network Scan",
			"description" : "A full system scan suitable for any host."		},
		{
			"id" : "4",
			"name" : "Credentialed Patch Audit",
			"description" : "Authenticate to hosts and enumerate missing updates."		},
		{
			"id" : "5",
			"name" : "Web Application Tests",
			"description" : "Scan for published and unknown web vulnerabilities."		},
		{
			"id" : "6",
			"name" : "Windows Malware Scan",
			"description" : "Scan for malware on Windows systems."		},
		{
			"id" : "7",
			"name" : "Policy Compliance Auditing",
			"description" : "Audit system configurations against a known baseline."		},
		{
			"id" : "8",
			"name" : "Internal PCI Network Scan",
			"description" : "Perform an internal PCI DSS (11.2.1) vulnerability scan."		},
		{
			"id" : "9",
			"name" : "SCAP Compliance Audit",
			"description" : "Audit systems by using SCAP content."		},
		{
			"id" : "10",
			"name" : "Bash Shellshock Detection",
			"description" : "Remote and local checks for CVE-2014-6271 and CVE-2014-7169."		},
		{
			"id" : "11",
			"name" : "GHOST (glibc) Detection",
			"description" : "Local checks for CVE-2015-0235."		},
		{
			"id" : "12",
			"name" : "Advanced Scan",
			"description" : "Configure a scan without using any recommendations."		}
	],
	"error_code" : 0,
	"error_msg" : "",
	"warnings" : [],
	"timestamp" : 1424979243
}

{
	"type" : "regular",
	"response" : {
		"id" : "2",
		"name" : "Host Discovery",
		"description" : "A simple scan to discover live hosts and open ports.",
		"editor" : "{\"sections\":[{\"name\":\"Setup\",\"id\":\"setup\",\"subsections\":[{\"id\":\"setup_general\",\"name\":\"General\",\"inputs\":[{\"id\":\"name\",\"type\":\"entry\",\"name\":\"Name\",\"required\":\"true\"},{\"id\":\"description\",\"type\":\"textarea\",\"name\":\"Description\"}]},{\"id\":\"setup_modes\",\"name\":\"Configuration\",\"inputs\":[{\"type\":\"dropdown\",\"id\":\"MODE|discovery\",\"name\":\"Discovery\",\"default\":\"host_enumeration\",\"options\":[{\"name\":\"Host enumeration\",\"id\":\"host_enumeration\",\"hint\":\"<ul><li>General Settings:<ul><li>Always test the local Nessus host<\\\/li><li>Use fast network discovery<\\\/li><\\\/ul><li>Ping hosts using:<ul><li>TCP<\\\/li><li>ARP<\\\/li><li>ICMP (2 retries)<\\\/li><\\\/ul><\\\/li><li>Scan all devices, including:<ul><li>Printers<\\\/li><li>Novell Netware hosts<\\\/li><\\\/ul><\\\/li><\\\/ul>\"},{\"name\":\"Port scan (common ports)\",\"id\":\"portscan_common\",\"hint\":\"<ul><li>General Settings:<ul><li>Always test the local Nessus host<\\\/li><li>Use fast network discovery<\\\/li><\\\/ul><\\\/li><li>Port Scanner Settings:<ul><li>Scan common ports<\\\/li><li>Use netstat if credentials are provided<\\\/li><li>Use SYN scanner if necessary<\\\/li><\\\/ul><\\\/li><li>Ping hosts using:<ul><li>TCP<\\\/li><li>ARP<\\\/li><li>ICMP (2 retries)<\\\/li><\\\/ul><\\\/li><li>Scan all devices, including:<ul><li>Printers<\\\/li><li>Novell Netware hosts<\\\/li><\\\/ul><\\\/li><\\\/ul>\"},{\"name\":\"Port scan (all ports)\",\"id\":\"portscan_all\",\"hint\":\"<ul><li>General Settings:<ul><li>Always test the local Nessus host<\\\/li><li>Use fast network discovery<\\\/li><\\\/ul><\\\/li><li>Port Scanner Settings:<ul><li>Scan all ports (1-65535)<\\\/li><li>Use netstat if credentials are provided<\\\/li><li>Use SYN scanner if necessary<\\\/li><\\\/ul><\\\/li><li>Ping hosts using:<ul><li>TCP<\\\/li><li>ARP<\\\/li><li>ICMP (2 retries)<\\\/li><\\\/ul><\\\/li><li>Scan all devices, including:<ul><li>Printers<\\\/li><li>Novell Netware hosts<\\\/li><\\\/ul><\\\/li><\\\/ul>\"},{\"name\":\"Custom\",\"id\":\"custom\",\"custom\":\"true\",\"hint\":\"<ul><li>Choose your own discovery settings.<\\\/li><\\\/ul>\"}]},{\"type\":\"dropdown\",\"id\":\"MODE|report\",\"name\":\"Report\",\"default\":\"default_output\",\"options\":[{\"name\":\"Default\",\"id\":\"default_output\",\"hint\":\"<ul><li>Report output:<ul><li>Allow users to edit scan results<\\\/li><\\\/ul><\\\/li><\\\/ul>\"},{\"name\":\"Custom\",\"id\":\"custom\",\"custom\":\"true\",\"hint\":\"<ul><li>Choose your own report settings.<\\\/li><\\\/ul>\"}]}]}],\"section\":\"setup\"},{\"name\":\"Host Discovery\",\"inputs\":[{\"id\":\"ping_the_remote_host\",\"type\":\"checkbox\",\"name\":\"Ping the remote host\",\"default\":\"yes\",\"conditionalSettings\":{\"yes\":{\"subsections\":[{\"name\":\"General settings\",\"inputs\":[{\"id\":\"test_local_nessus_host\",\"type\":\"checkbox\",\"name\":\"Test the local Nessus host\",\"default\":\"yes\",\"hint\":\"This setting specifies whether the local Nessus host should be scanned when it falls within the target range specified for the scan.\"},{\"id\":\"fast_network_discovery\",\"type\":\"checkbox\",\"name\":\"Use fast network discovery\",\"hint\":\"If a host responds to ping, Nessus attempts to avoid false positives, performing additional tests to verify the response did not come from a proxy or load balancer. Fast network discovery bypasses those additional tests.\",\"default\":\"no\"}],\"id\":\"ping_the_remote_host_general\"},{\"name\":\"Ping Methods\",\"inputs\":[{\"id\":\"arp_ping\",\"type\":\"checkbox\",\"name\":\"ARP\",\"default\":\"yes\"},{\"id\":\"tcp_ping\",\"type\":\"checkbox\",\"name\":\"TCP\",\"default\":\"yes\",\"conditionalSettings\":{\"yes\":{\"inputs\":[{\"id\":\"tcp_ping_dest_ports\",\"type\":\"medium-entry\",\"name\":\"Destination ports\",\"default\":\"built-in\"}]}}},{\"id\":\"icmp_ping\",\"type\":\"checkbox\",\"name\":\"ICMP\",\"default\":\"yes\",\"conditionalSettings\":{\"yes\":{\"inputs\":[{\"id\":\"icmp_unreach_means_host_down\",\"type\":\"checkbox\",\"name\":\"Assume ICMP unreachable from the gateway means the host is down\",\"default\":\"no\"},{\"id\":\"icmp_ping_retries\",\"type\":\"medium-entry\",\"name\":\"Maximum number of retries\",\"default\":\"2\",\"regex\":\"^\\\\d+$\"}]}}},{\"id\":\"udp_ping\",\"type\":\"checkbox\",\"name\":\"UDP\",\"default\":\"no\"}],\"id\":\"ping_the_remote_host_protocols\"}]}}}],\"subsections\":[{\"name\":\"Fragile Devices\",\"inputs\":[{\"id\":\"scan_network_printers\",\"type\":\"checkbox\",\"name\":\"Scan Network Printers\",\"default\":\"no\"},{\"id\":\"scan_netware_hosts\",\"type\":\"checkbox\",\"name\":\"Scan Novell Netware hosts\",\"default\":\"no\"}],\"id\":\"discovery_host_discovery_fragile_devices\"},{\"name\":\"Wake-on-LAN\",\"inputs\":[{\"id\":\"wol_mac_addresses\",\"type\":\"file\",\"name\":\"List of MAC addresses\"},{\"id\":\"wol_wait_time\",\"type\":\"medium-entry\",\"name\":\"Boot time wait (in minutes)\",\"default\":\"5\",\"regex\":\"^\\\\d+$\"}],\"id\":\"discovery_host_discovery_wol\"},{\"name\":\"Network Type\",\"inputs\":[{\"id\":\"network_type\",\"type\":\"dropdown\",\"name\":\"Network Type\",\"options\":[\"Mixed (use RFC 1918)\",\"Private LAN\",\"Public WAN (Internet)\"],\"default\":\"Mixed (use RFC 1918)\"}],\"id\":\"discovery_host_discovery_network_type\"}],\"id\":\"discovery_host_discovery\",\"section\":\"discovery\"},{\"id\":\"discovery_network_discovery\",\"subsections\":[{\"name\":\"Ports\",\"inputs\":[{\"id\":\"unscanned_closed\",\"type\":\"checkbox\",\"name\":\"Consider unscanned ports as closed\",\"default\":\"no\"},{\"id\":\"portscan_range\",\"type\":\"medium-entry\",\"name\":\"Port scan range:\",\"default\":\"default\"}],\"id\":\"discovery_network_discovery_ports\",\"section\":\"discovery_network_discovery\"},{\"name\":\"Network Port Scanners\",\"inputs\":[{\"id\":\"tcp_scanner\",\"type\":\"checkbox\",\"name\":\"TCP\",\"default\":\"no\",\"conditionalSettings\":{\"yes\":{\"inputs\":[{\"id\":\"tcp_firewall_detection\",\"type\":\"dropdown\",\"name\":\"Override automatic firewall detection\",\"default\":\"Automatic (normal)\",\"options\":[{\"name\":\"Automatic (normal)\",\"hint\":\"\"},{\"name\":\"Do not detect RST rate limitation (soft)\",\"hint\":\"Use soft detection\"},{\"name\":\"Ignore closed ports (aggressive)\",\"hint\":\"Use aggressive detection\"},{\"name\":\"Disabled (softer)\",\"hint\":\"Disable detection\"}]}]}}},{\"id\":\"syn_scanner\",\"type\":\"checkbox\",\"name\":\"SYN\",\"default\":\"yes\",\"conditionalSettings\":{\"yes\":{\"inputs\":[{\"id\":\"syn_firewall_detection\",\"type\":\"dropdown\",\"name\":\"Override automatic firewall detection\",\"default\":\"Automatic (normal)\",\"options\":[{\"name\":\"Automatic (normal)\",\"hint\":\"\"},{\"name\":\"Do not detect RST rate limitation (soft)\",\"hint\":\"Use soft detection\"},{\"name\":\"Ignore closed ports (aggressive)\",\"hint\":\"Use aggressive detection\"},{\"name\":\"Disabled (softer)\",\"hint\":\"Disable detection\"}]}]}}},{\"id\":\"udp_scanner\",\"type\":\"checkbox\",\"name\":\"UDP\",\"default\":\"no\",\"hint\":\"Due to the nature of the protocol, it is generally not possible for a port scanner to tell the difference between open and filtered UDP ports.  Enabling the UDP port scanner may dramatically increase the scan time and produce unreliable results. Consider using the netstat or SNMP port enumeration options instead if possible.\"}],\"id\":\"discovery_network_discovery_network_scanners\",\"section\":\"discovery_network_discovery\"}]},{\"name\":\"Report\",\"subsections\":[{\"name\":\"Report output\",\"inputs\":[{\"id\":\"allow_post_scan_editing\",\"type\":\"checkbox\",\"name\":\"Allow users to edit scan results\",\"default\":\"yes\"},{\"id\":\"reverse_lookup\",\"type\":\"checkbox\",\"name\":\"Designate hosts by their DNS name\",\"default\":\"no\"},{\"id\":\"log_live_hosts\",\"type\":\"checkbox\",\"name\":\"Display hosts that respond to ping\",\"default\":\"no\"},{\"id\":\"display_unreachable_hosts\",\"type\":\"checkbox\",\"name\":\"Display unreachable hosts\",\"default\":\"no\"}],\"id\":\"report_report_output\",\"section\":\"report\"}],\"id\":\"report\",\"section\":\"report\"}]}",
		"createdTime" : "1423297810",
		"modifiedTime" : "1424507404",
		"templateModTime" : "1424474588",
		"templatePubTime" : "1406151204",
		"templateDefModTime" : "1424470185",
		"agent" : "false",
		"isWas" : "false"	},
	"error_code" : 0,
	"error_msg" : "",
	"warnings" : [],
	"timestamp" : 1424979089
}