Add a new threat scanner

You can set up a new threat scanner, associate it with supported scan types, and set a scan rate limit, as needed.

Before you begin

Before you can add a third-party scanning service, you must obtain a license to use that service and, in many cases, an API Key to facilitate the integration.

Role required: sn_ti.admin

Procedure

  1. Navigate to Threat Intelligence > Threat Scanning > Scanners.
  2. Click New.
  3. Fill in the fields, as needed.
    Table 1. Threat Scanners
    Field Description
    Name Enter a name for the threat scanner.
    Application The type of scoped application.
    Active Select this check box to activate this threat scanner..
  4. Right-click in the form header, and click Save.
  5. In the Supported scan types related list, click New.
  6. Fill in the fields, as needed.
    Table 2. Supported scan type
    Field Description
    Scanner Prefills with the name of the scanner you are defining.
    Scan type Select an existing supported scan type, or click the magnifying glass and click New to define a new supported scan type.
    Integration factory script Enter a script to construct the scanner integration implementation that is defined by a script include. The script include should extend sn_ti.ThreatIntegrationBase, and provide the mechanism that makes scan requests and report requests with a threat scan engine. The last line of the script should be the constructed integration implementation.
    Processor factory script The script to construct the scan report processing implementation that is defined by a script include. The script include should extend ThreatProcessorBase, and provide the mechanism that processes a scan report from a threat scan engine. The last line of the script should be the constructed processor implementation.
  7. If you want to make this the default scan type for this scanner, right-click in the form header, click Save, then click Make default; otherwise, click Submit.
  8. Repeat steps 5 through 7 for each supported scan type you want to associate with this scanner.
  9. If you want to define a scanner rate limit, click the Scanner rate limit related list.