Rapid7 InsightVM

About this document

This document provides the step-by-step procedure to configure Rapid7 InsightVM in SAFE.

Pre-requisites

• You must install an on-prem Site Coordinator (SC) for the SAFE instance on which you want to configure Rapid7 InsightVM. To install a Site Coordinator, refer to Installing Site Coordinator.
• To configure Rapid7 InsightVM, you need the following details:
  • Rapid7 InsightVM Username
  • Rapid7 InsightVM Password (Refer to Rapid7 InsightVM API authentication)

Hardware Requirements

• For an existing Site Coordinator, we recommend assigning an additional 4 GB RAM before configuring Rapid7 InsightVM.
• For a new Site Coordinator deployment with Rapid7 InsightVM integration, we recommend:
  • 4 Core CPU
  • 8 GB RAM
  • 50 GB disk storage

Configure Rapid7 InsightVM

On SAFE

On Site Coordinator

1. Ensure you have the latest install-site-coordinator.sh script present on Site Coordinator. This step is not required if it is a fresh Site Coordinator installation.
   For an already existing Site Coordinator setup, download the script from the SAFE instance. SAFE_URL is the SAFE dashboard’s URL.
   curl -o install-site-coordinator.sh https://<SAFE_URL>/download-scripts/install-site-coordinator.sh
   
2. For fresh installation of InsightVM connector image version <version>, execute the following command.
   sh install-site-coordinator.sh --connector:insightvm
   The script will prompt for inputs, and answering them will help you configure InsightVM - Rapid7 assessment
   The below screenshot provides an example of the installation.
   

Upgrade InsightVM - Rapid7 integration

If there is a new update available for an existing Rapid7 InsightVM, the integration can be upgraded to the new version by executing the following command.

sh install-site-coordinator.sh --connector:insightvm  --update

View results of InsightVM - Rapid7 Assessments

After a successful sync, SAFE automatically imports the Rapid7 assets in SAFE. These assets can be viewed in SAFE as per the vertical corresponding to their asset type under the Technology > Inside-out page. Any asset where mapping to the asset type is not found, the asset will still be added under the OTHERS vertical.