If there are any issues with the scan engine directory integrity, you can reset the engines to download fresh instances. Run the following commands to reset the scan engines: cd /opt/f-secure/radar-scannodeagent sudo dotnet ScanNodeAgent.dll reset-engines To reset a specific scan engine, you can use the engine type as an argument: cd /opt/f-secure/radar-scannodeagent sudo dotnet ScanNodeAgent.dll […]
By default, the scan node agent checks for engine updates automatically every 4 hours, but you can also check for updates and install them manually. Run the following commands to manually update the scan engines: cd /opt/f-secure/radar-scannodeagent sudo dotnet ScanNodeAgent.dll update-engines Source : Official F-Secure Brand Editor by : BEST Antivirus KBS Team
If the default limits for simultaneous scans cause performance issues, you can customize the limits. Run the following commands to change the default limits: cd /opt/f-secure/radar-scannodeagent sudo dotnet ScanNodeAgent.dll set-config DiscoveryScan.MaxSimultaneousScans 3 sudo dotnet ScanNodeAgent.dll set-config SystemScan.MaxSimultaneousScans 10 sudo dotnet ScanNodeAgent.dll set-config WebScan.MaxSimultaneousScans 3 https://kbs.bestantivirus.co.uk/wp-admin/post.php?post=30051&action=edit
For network vulnerability scans to correctly validate SSL/TLS certificates signed by a local certification authority (CA), you have to install the root certificate on the scan node server. System scans use the same certificate store as OpenSSL. To install the rootCA.crt certificate file on Debian or Ubuntu distributions: Run the following command to create a directory for […]
If you use a proxy server or host your local Elements Security Center using a self-signed SSL certificate, you can disable certificate validation by setting the appropriate configuration keys. Run the following commands: cd /opt/f-secure/radar-scannodeagent sudo dotnet ScanNodeAgent.dll set-config SkipSecurityCenterSslCertificateCheck true sudo dotnet ScanNodeAgent.dll set-config SkipUpdateServiceSslCertificateCheck true Important: F-Secure does not recommend disabling the SSL certificate […]
As Radar Scan Node Agent sends requests to the Elements Security Center and Radar Update Service, you need to configure the appropriate proxy address to redirect the traffic. Run the following commands: cd /opt/f-secure/radar-scannodeagent sudo dotnet ScanNodeAgent.dll set-config SecurityCenterProxyUri http://proxy.example.com:8080 sudo dotnet ScanNodeAgent.dll set-config UpdateServiceProxyUri http://proxy.example.com:8080 Note: If you used environment variables to set proxy settings […]
If you are using a privately hosted installation of the Elements Vulnerability Management portal, you need to set its address in the scan node configuration. Run the following commands: cd /opt/f-secure/radar-scannodeagent sudo dotnet ScanNodeAgent.dll set-config SecurityCenterUri https://securitycenter.example.com:8080 Note: If the installation directory (/opt/f-secure/radar-scannodeagent) already contains a .fsrl file that points to a different Elements Security Center address, the […]
Both Windows and Linux authenticated scanning is supported on Linux scan nodes. Windows authenticated scanning is supported using WinRM. Select the Specify credentials explicitly option when creating the system scan template. For Linux authenticated scanning, you need to set up the encryption keys to transfer the credentials securely. For more information, see Preparation steps. Run the following commands […]
To apply a new .fsrl license file to an already installed Radar Scan Node Agent, you need to copy the file to the installation directory. Run the following commands to apply the new license file: cd /opt/f-secure/radar-scannodeagent && sudo dotnet ScanNodeAgent.dll apply-license ./license.fsrl To apply a known Radar Scan Node Agent license ID for a […]
This topic lists useful commands for modifying the Linux scan node configuration. Run the following command to go to the Scan Node Agent installation directory: cd /opt/f-secure/radar-scannodeagent Use the following commands to edit the settings: To get all settings: sudo dotnet ScanNodeAgent.dll get-config To get a single setting, for example to check the entry that […]