{"sections":[{"name":"Setup","id":"setup","subsections":[{"id":"setup_general","name":"General","inputs":[{"id":"name","type":"entry","name":"Name","required":"true","preferenceID":"name"},{"id":"description","type":"textarea","name":"Description","preferenceID":"description"}]},{"id":"setup_modes","name":"Configuration","inputs":[{"type":"dropdown","id":"MODE|discovery","name":"Discovery","default":"host_enumeration","options":[{"name":"Host enumeration","id":"host_enumeration","hint":"<ul><li>General Settings:<ul><li>Always test the local Nessus host</li><li>Use fast network discovery</li></ul></li><li>Ping hosts using:<ul><li>TCP</li><li>ARP</li><li>ICMP (2 retries)</li></ul></li></ul>"},{"name":"OS Identification","id":"os_identification","hint":"<ul><li>General Settings:<ul><li>Always test the local Nessus host</li><li>Use fast network discovery</li></ul></li><li>Ping hosts using:<ul><li>TCP</li><li>ARP</li><li>ICMP</li></ul></li></ul>"},{"name":"Port scan (common ports)","id":"portscan_common","hint":"<ul><li>General Settings:<ul><li>Always test the local Nessus host</li><li>Use fast network discovery</li></ul></li><li>Port Scanner Settings:<ul><li>Scan common ports</li><li>Use netstat if credentials are provided</li><li>Use SYN scanner if necessary</li></ul></li><li>Ping hosts using:<ul><li>TCP</li><li>ARP</li><li>ICMP (2 retries)</li></ul></li></ul>"},{"name":"Port scan (all ports)","id":"portscan_all","hint":"<ul><li>General Settings:<ul><li>Always test the local Nessus host</li><li>Use fast network discovery</li></ul></li><li>Port Scanner Settings:<ul><li>Scan all ports (1-65535)</li><li>Use netstat if credentials are provided</li><li>Use SYN scanner if necessary</li></ul></li><li>Ping hosts using:<ul><li>TCP</li><li>ARP</li><li>ICMP (2 retries)</li></ul></li></ul>"},{"name":"Custom","id":"custom","custom":"true","hint":"<ul><li>Choose your own discovery settings.</li></ul>"}]}]}],"section":"setup"},{"name":"Host Discovery","subsections":[{"id":"discovery_host_discovery_inputs","inputs":[{"id":"ping_the_remote_host","type":"checkbox","name":"Ping the remote host","default":"yes","preferenceID":"portscan.ping","conditionalSettings":{"yes":{"subsections":[{"name":"General Settings","inputs":[{"id":"test_local_nessus_host","type":"checkbox","name":"Test the local Nessus host","default":"yes","hint":"This setting specifies whether the local Nessus host should be scanned when it falls within the target range specified for the scan.","preferenceID":"Ping the remote host[checkbox]:Test the local Nessus host"},{"id":"fast_network_discovery","type":"checkbox","name":"Use fast network discovery","hint":"If a host responds to ping, Nessus attempts to avoid false positives, performing additional tests to verify the response did not come from a proxy or load balancer. Fast network discovery bypasses those additional tests.","default":"yes","preferenceID":"Ping the remote host[checkbox]:Fast network discovery"}],"id":"ping_the_remote_host_general"},{"name":"Ping Methods","inputs":[{"id":"arp_ping","type":"checkbox","name":"ARP","default":"yes","preferenceID":"Ping the remote host[checkbox]:Do an ARP ping"},{"id":"tcp_ping","type":"checkbox","name":"TCP","default":"yes","preferenceID":"Ping the remote host[checkbox]:Do a TCP ping","conditionalSettings":{"yes":{"inputs":[{"id":"tcp_ping_dest_ports","type":"medium-entry","name":"Destination ports","default":"built-in","preferenceID":"Ping the remote host[entry]:TCP ping destination port(s) :"}]}}},{"id":"icmp_ping","type":"checkbox","name":"ICMP","default":"yes","preferenceID":"Ping the remote host[checkbox]:Do an ICMP ping","conditionalSettings":{"yes":{"inputs":[{"id":"icmp_unreach_means_host_down","type":"checkbox","name":"Assume ICMP unreachable from the gateway means the host is down","default":"no","preferenceID":"Ping the remote host[checkbox]:Interpret ICMP unreach from gateway"},{"id":"icmp_ping_retries","type":"medium-entry","name":"Maximum number of retries","default":"2","regex":"^\d+$","preferenceID":"Ping the remote host[entry]:Number of retries (ICMP) :"}]}}},{"id":"udp_ping","type":"checkbox","name":"UDP","default":"no","preferenceID":"Ping the remote host[checkbox]:Do an applicative UDP ping (DNS,RPC...)"}],"id":"ping_the_remote_host_protocols"}]}}}]},{"name":"Fragile Devices","inputs":[{"id":"scan_network_printers","type":"checkbox","name":"Scan Network Printers","default":"no","preferenceID":"Do not scan fragile devices[checkbox]:Scan Network Printers"},{"id":"scan_netware_hosts","type":"checkbox","name":"Scan Novell Netware hosts","default":"no","preferenceID":"Do not scan fragile devices[checkbox]:Scan Novell Netware hosts"},{"id":"scan_ot_devices","type":"checkbox","name":"Scan Operational Technology devices","default":"no","preferenceID":"Do not scan fragile devices[checkbox]:Scan Operational Technology devices"}],"id":"discovery_host_discovery_fragile_devices"},{"name":"Wake-on-LAN","inputs":[{"id":"wol_mac_addresses","type":"file","name":"List of MAC addresses","preferenceID":"Wake-on-LAN[file]:List of MAC addresses for Wake-on-LAN:"},{"id":"wol_wait_time","type":"medium-entry","name":"Boot time wait (in minutes)","default":"5","regex":"^\d+$","preferenceID":"Wake-on-LAN[entry]:Time to wait (in minutes) for the systems to boot:"}],"id":"discovery_host_discovery_wol"},{"name":"Network Type","inputs":[{"id":"network_type","type":"dropdown","name":"Network Type","options":["Mixed (use RFC 1918)","Private LAN","Public WAN (Internet)"],"default":"Mixed (use RFC 1918)","preferenceID":"Global variable settings[radio]:Network type"}],"id":"discovery_host_discovery_network_type"}],"id":"discovery_host_discovery","section":"discovery"},{"name":"Port Scanning","id":"discovery_network_discovery","section":"discovery","subsections":[{"name":"Ports","inputs":[{"id":"unscanned_closed","type":"checkbox","name":"Consider unscanned ports as closed","default":"no","preferenceID":"unscanned_closed"},{"id":"portscan_range","type":"medium-entry","name":"Port scan range:","default":"default","preferenceID":"port_range"}],"id":"discovery_network_discovery_ports","section":"discovery_network_discovery"},{"name":"Network Port Scanners","inputs":[{"id":"tcp_scanner","type":"checkbox","name":"TCP","default":"no","preferenceID":"network_scanners.tcp","conditionalSettings":{"yes":{"inputs":[{"id":"tcp_firewall_detection","type":"dropdown","name":"Override automatic firewall detection","default":"Automatic (normal)","options":[{"name":"Automatic (normal)","hint":""},{"name":"Do not detect RST rate limitation (soft)","hint":"Use soft detection"},{"name":"Ignore closed ports (aggressive)","hint":"Use aggressive detection"},{"name":"Disabled (softer)","hint":"Disable detection"}],"preferenceID":"Nessus TCP scanner[radio]:Firewall detection :"}]}}},{"id":"syn_scanner","type":"checkbox","name":"SYN","default":"yes","preferenceID":"network_scanners.syn","conditionalSettings":{"yes":{"inputs":[{"id":"syn_firewall_detection","type":"dropdown","name":"Override automatic firewall detection","default":"Automatic (normal)","options":[{"name":"Automatic (normal)","hint":""},{"name":"Do not detect RST rate limitation (soft)","hint":"Use soft detection"},{"name":"Ignore closed ports (aggressive)","hint":"Use aggressive detection"},{"name":"Disabled (softer)","hint":"Disable detection"}],"preferenceID":"Nessus SYN scanner[radio]:Firewall detection :"}]}}},{"id":"udp_scanner","type":"checkbox","name":"UDP","default":"no","hint":"Due to the nature of the protocol, it is generally not possible for a port scanner to tell the difference between open and filtered UDP ports. Enabling the UDP port scanner may dramatically increase the scan time and produce unreliable results. Consider using the netstat or SNMP port enumeration options instead if possible.","preferenceID":"network_scanners.udp"}],"id":"discovery_network_discovery_network_scanners","section":"discovery_network_discovery"}]},{"name":"Report","subsections":[{"name":"Output","inputs":[{"id":"reverse_lookup","type":"checkbox","name":"Designate hosts by their DNS name","default":"no","preferenceID":"reverse_lookup"},{"id":"log_live_hosts","type":"checkbox","name":"Display hosts that respond to ping","default":"yes","preferenceID":"Ping the remote host[checkbox]:Log live hosts in the report"},{"id":"display_unreachable_hosts","type":"checkbox","name":"Display unreachable hosts","default":"no","preferenceID":"Ping the remote host[checkbox]:Make the dead hosts appear in the report"},{"id":"display_unicode_characters","type":"checkbox","name":"Display Unicode characters","default":"no","hint":"WARNING: This feature may cause issues with compliance checks and custom plugins that encounter ISO-8859-1 encoded output","preferenceID":"scan.enable_utf8_output"}],"id":"report_report_output","section":"report"}],"id":"report","section":"report"}]}