Importing ACAS/Nessus/Security Center Scans
In order for Xylok to correctly process ACAS scans, there must be an existing machine with a matching IP Address or Host name for each machine in the ACAS scan. For example, if the ACAS scan has the following information for one of it’s reports (scans):
<Report name="SingleHost Full Vulnerability Scan " xmlns:cm="http://www.nessus.org/cm">
<ReportHost name="192.168.1.110"><HostProperties> ...
Xylok must have a machine where either the IP or host name field contains 192.168.1.110 in order for the ACAS scan to be imported correctly. This must be true for every machine present in the ACAS scan. Machines are allowed to have more than one IP Address or host name.
If Xylok scans have already been performed on these machines, there is a good chance this information is already filled in automatically.
ACAS scans can be imported directly into Xylok using the standard upload system. If no further information is needed, the task will work for a while and then appear in the successful tasks section of the task monitor page. However, if Xylok is unable to match the XCCDF(s) to machines based on IP or host name the task will be moved to the Action Needed section.
If Xylok is unable to find machines for each IP Address in the ACAS scan, the task monitor will present a link to a resolution page:
Follow the directions on the page and hit “Retry” once all of the IP Addresses have been resolved. Xylok will attempt the file upload again.
This process assumes that each machine that was scanned using ACAS is also present in Xylok. If this is not the case, create the machines in Xylok before attempting to upload the ACAS scan. If you don’t want to match particular ACAS items to Xylok machines, remove them from the upload.