Greenbone OS: Upcoming Release

Please note that the feature list remains subject to change.

New and improved feature for already published releases are provided as Patch Level Upgrades and are documented in detail here: Greenbone OS: Release History

The items marked with (*) will change the default behaviour.

Greenbone OS 2.2.0 (ca. May 2013)

• Tasks: Now with new object management

  Tasks are now handled via the new object management and therefore gain access to the power filter and to the functionalities Clone and Export.

• Overrides: Now with new object management

  Overrides are now handled via the new object management and therefore gain access to the power filter and to the trashcan. Functionalities Clone and Export are also added.

  Furthermore Overrides can now be directly created even without necessity to go via a Task.

  All user interfaces where lists of Overrides were shown, like for NVT Details, were changed so that the lists are replaced by a link into the Overrides management with a apropriate context Filter.

• SecInfo Management: CVE data with new object management

  The CVE Lookup is replaced by the new object management. This makes interactive search, the Powerfilter and many other functions available for CVE data. The Greenbone SecInfo CVE database contains the offical CVE database of MITRE with over 50,000 CVEs.

• SecInfo Management: OVAL database

  New element of the SecInfo Management are the OVAL data. OVAL stands for Open Vulnerability Assessment Language and is a formal description for vulnerability evaluation. These information help with the analysis are are cross-referenced via CVE. The Greenbone SecInfo OVAL database contains the official OVAL Repository of MITRE with over 14,000 OVAL Definitions.

• SecInfo Management: DFN-CERT Database

  Neu element in the SecInfo Management are the security alerts issued by the german DFN-CERT, the CERT of the german research network. These security alerts are published in german language and are referenced into scan result via CVE identifiers.

• Port Lists: Now with new object management

  Port Lists are now handled via the new object management and therefore gain access to the power filter and to the functionality Clone.

• Credentials: Now with new object management

  Credentials are now handled via the new object management and therefore gain access to the power filter and to the functionalities Clone and Export. However, passwords will not be present in exported data.

• Schedules: Now with new object management

  Schedules are now handled via the new object management and therefore gain access to the power filter and to the functionalities Clone and Export.

• Scan Configs: Now with new object management

  Scan Configs are now handled via the new object management and therefore gain access to the power filter and to the functionality Clone.

• Alerts: Now with new object management

  Alerts are now handled via the new object management and therefore gain access to the power filter and to the functionalities Clone and Export.

• Report Formats: Now with new object management

  Report Formats are now handled via the new object management and therefore gain access to the power filter and to the functionalities Clone and Export.

• Slaves: Now with new object management

  Slaves are now handled via the new object management and therefore gain access to the power filter and to the functionalities Clone and Export.

• Powerfilter: Syntax extension to select backward from current date for a fixed time span in timestamp columns. For example, "modified>-7d" will select all objects modified in the past 7 days.

• Powerfilter: Syntax extension to select exact matches in multiple fields. For example, "=192.168.12.1" will select all objects where any of the fields contains exactly this IP.

• SCAP Feed-Update: This function is now also available via the Web-Interface in the Administration area. However, the updates are still done automatically in the background. A manual start is rarely needed in special situations.

• Personal default powerfilters: In "My Settings" it is now possible to set a preferred Powerfilter for each object class. If you open the overview of the object class, for example the Task overview, automatically your personal default Powerfilter will be used to apply your preferred sorting and filtering.

• Agents: Now with new object management

Greenbone OS 2.3.0 (ca. Q3/2013)

• Groups: For access permissions users can now be associated with Groups. The web interface allows full management of these groups for users with Administror role.

• Permissions: Under menu "Configuration" there is now a new item "Permissions". Here the user has a comfortable overview on all of his access permissions and opportunties to manage them.

• Tags: The new configuration object class "Tag" allows to attach short texts to almost any other object. These texte are availble to filtering and are included in export files. This enable to create thematic groups or attach arbitrary attributes to objects.

• Search interface for all objects of the SecInfo Management: Via new menu item "All SecInfo" it is possible to search for keywords and with other methods of the Powerfilter through almost 300.000 objects of various types.

• New pre-configure Scan Configuration "Discovery". This Scan Configuration applies any NVTs that discover as many details about the target system, installed services and applications, as possible. No vulnerability tests are executed.

• Integrated online CVSS calculator: Under menu "Extras/CVSS Calculator" a form is available that supports calculating a CVSS value.

• Reports: The browser for the the report view was entirely reworked and split up into multiple sections, each with a page of its own. Countless changes and extensions were applied.

• Reports: The port information ist now extended with the current IANA service name that is registered for this port.

• User management is made available via OMP.

• Feed management is made available via OMP.

• OVAL Definitions: The overview as well as the details dialog for OVAL Definitions has been reworked.