pvm

[Global]

State=1

EventTTL=604800         # 7 days keeping the vulnerability / product detection

EventConnTTL=5          # 5 seconds

EventParserTTL=86400    # 1 day

VulnRefUrlPrefix=https://securitykb.stormshield.eu/

mail1=  # Recipient mailgroup for the detailled email, set to empty to disable

mail2=  # Recipient mailgroup for summary email, set to empty to disable

Verbose=0# 0=>none, 1=>Error, 2=>Error+Info, 3=>Error+Info+Debug

VerboseFile=/tmp/pvm.debug

[MonitoredHost]

network_internals,All

[HostExclude]

[Profile_List]## Servers = 6 Profiles | Clients = 6 Profiles | ALL = 1 Profile => 13 Profiles

Servers## Servers Sides Families vulnerabilities (SSH - Web Apps - DB - DNS - Web Serber - FTP Server - Misc - Mail Server - P2P - OS)

Servers_Critical## High & Critical only Servers Sides Families vulnerabilities (SSH - Web Apps - DB - DNS - Web Server - FTP Server - Misc - Mail Server - P2P - OS)

FTP_Servers## FTP Servers vulnerabilities

Mail_Servers## Mail Servers vulnerabilities

Web_Servers## Web Servers vulnerabilities

Database_Servers## DB Servers vulnerabilities

Desktop_Apps## Client Side Desktop Apps Families vulnerabilities (All Families used for client product vulnerabilities)

Desktop_Apps_Critical## High & Critical only Client Side Desktop Apps Families vulnerabilities (All Families used for client product vulnerabilities)

Mail_Client## Mail Clients vulnerabilities

Web_Client## Web Client + RSS Reader vulnerabilities

Security_Tools## Security Tools (NETASQ Tool - Antivirus - Scanner) vulnerabilities

Admin_Tools## Security Tools (SSH - FTP Client - etc ..) vulnerabilities

All## All vulnerabilities with ordered level (High & Critical => major | Low & Med => minor)

## FOR SERVER SIDE PRODUCTS HIGH & CRITICAL ONLY VULNERABILITIES ASSESSMENT

[Profile_Servers]

state=1 family=1 targetserver=1  ## SSH

state=1 family=2       ## Web Application

state=1 family=3       ## Database

state=1 family=4       ## DNS Server

state=1 family=5     ## Web Server

state=1 family=7     ## FTP Server

state=1 family=9 targetserver=1  ## Misc

state=1 family=11 ## Mail Server

state=1 family=13 targetserver=1 ## Peer To Peer

state=1 family=15     ## Operating Systems

## FOR SERVER SIDE PRODUCTS HIGH & CRITICAL ONLY VULNERABILITIES ASSESSMENT

[Profile_Servers_Critical]

state=1 family=1 severity=3 level=major   ## SSH * vulns_HIGH

state=1 family=1 severity=4 level=major   ## SSH * vulns_CRITICAL

state=1 family=2 severity=3 level=major     ## Web Application * vulns_HIGH

state=1 family=2 severity=4 level=major     ## Web Application * vulns_CRITICAL

state=1 family=3 severity=3 level=major     ## Database * vulns_HIGH

state=1 family=3 severity=4 level=major     ## Database * vulns_CRITICAL

state=1 family=4 severity=3 level=major     ## DNS Server * vulns_HIGH

state=1 family=4 severity=4 level=major     ## DNS Server * vulns_CRITICAL

state=1 family=5 severity=3 level=major     ## Web Server * vulns_HIGH

state=1 family=5 severity=4 level=major     ## Web Server * vulns_CRITICAL

state=1 family=7 severity=3 level=major     ## FTP Server * vulns_HIGH

state=1 family=7 severity=4 level=major     ## FTP Server * vulns_CRITICAL

state=1 family=9 severity=3 level=major targetserver=1   ## Misc * vulns_HIGH

state=1 family=9 severity=4 level=major targetserver=1   ## Misc * vulns_CRITICAL

state=1 family=11 severity=3 level=major ## Mail Server * vulns_HIGH

state=1 family=11 severity=4 level=major ## Mail Server * vulns_CRITICAL

state=1 family=13 severity=3 level=major targetserver=1  ## Peer To Peer * vulns_HIGH

state=1 family=13 severity=4 level=major targetserver=1  ## Peer To Peer * vulns_CRITICAL

state=1 family=15 severity=3 level=major ## Operating Systems * vulns_HIGH

state=1 family=15 severity=4 level=major ## Operating Systems * vulns_CRITICAL

## FOR FTP SERVERS VULNERABILITIES ASSESSMENT

[Profile_FTP_Servers]

state=1 family=7     ## FTP Server

## FOR MAIL SERVERS VULNERABILITIES ASSESSMENT

[Profile_Mail_Servers]

state=1 family=11     ## Mail Server

## FOR WEB SERVERS VULNERABILITIES ASSESSMENT

[Profile_Web_Servers]

state=1 family=5     ## Web Server

## FOR DATABASE SERVERS VULNERABILITIES ASSESSMENT

[Profile_Database_Servers]

state=1 family=3     ## Database

## FOR CLIENT SIDE PRODUCTS VULNERABILITIES ASSESSMENT

[Profile_Desktop_Apps]

state=1 family=1 targetclient=1  ## SSH

state=1 family=6       ## Web Client

state=1 family=8       ## FTP Client

state=1 family=9 targetclient=1 ## Misc

state=1 family=10     ## Instant Messengers

state=1 family=12     ## Mail Client

state=1 family=13 targetclient=1 ## Peer To Peer

state=1 family=14     ## Media Players

state=1 family=15     ## Operating Systems

state=1 family=17     ## Malware

state=1 family=18     ## RSS Reader

state=1 family=19     ## Office

state=1 family=20     ## System Tool

state=1 family=21     ## SNS Tool

state=1 family=22     ## Security Scanner

state=1 family=23     ## Antivirus

## FOR CLIENT SIDE HIGH & CRITICAL ONLY VULNERABILITIES ASSESSMENT

[Profile_Desktop_Apps_Critical]

state=1 family=1 severity=3 level=major targetclient=1  ## SSH * vulns_HIGH

state=1 family=1 severity=4 level=major targetclient=1  ## SSH * vulns_CRITICAL

state=1 family=6 severity=3 level=major       ## Web Client * vulns_HIGH

state=1 family=6 severity=4 level=major       ## Web Client * vulns_CRITICAL

state=1 family=8 severity=3 level=major       ## FTP Client * vulns_HIGH

state=1 family=8 severity=4 level=major       ## FTP Client * vulns_CRITICAL

state=1 family=9 severity=3 level=major targetclient=1## Misc * vulns_HIGH

state=1 family=9 severity=4 level=major targetclient=1## Misc * vulns_CRITICAL

state=1 family=10 severity=3 level=major      ## Instant Messengers * vulns_HIGH

state=1 family=10 severity=4 level=major      ## Instant Messengers * vulns_CRITICAL

state=1 family=12 severity=3 level=major      ## Mail Client * vulns_HIGH

state=1 family=12 severity=4 level=major    ## Mail Client * vulns_CRITICAL

state=1 family=13 severity=3 level=major targetclient=1 ## Peer To Peer * vulns_HIGH

state=1 family=13 severity=4 level=major targetclient=1 ## Peer To Peer * vulns_CRITICAL

state=1 family=14 severity=3 level=major      ## Media Players * vulns_HIGH

state=1 family=14 severity=4 level=major      ## Media Players * vulns_CRITICAL

state=1 family=15 severity=3 level=major      ## Operating Systems * vulns_HIGH

state=1 family=15 severity=4 level=major      ## Operating Systems * vulns_CRITICAL

state=1 family=17 severity=3 level=major      ## Malware * vulns_HIGH

state=1 family=17 severity=4 level=major      ## Malware * vulns_CRITICAL

state=1 family=18 severity=3 level=major      ## RSS Reader * vulns_HIGH

state=1 family=18 severity=4 level=major      ## RSS Reader * vulns_CRITICAL

state=1 family=19 severity=3 level=major      ## Office * vulns_HIGH

state=1 family=19 severity=4 level=major      ## Office * vulns_CRITICAL

state=1 family=20 severity=3 level=major      ## System Tool * vulns_HIGH

state=1 family=20 severity=4 level=major      ## System Tool * vulns_CRITICAL

state=1 family=21 severity=3 level=major      ## SNS Tool * vulns_HIGH

state=1 family=21 severity=4 level=major      ## SNS Tool * vulns_CRITICAL

state=1 family=22 severity=3 level=major      ## Security Scanner * vulns_HIGH

state=1 family=22 severity=4 level=major      ## Security Scanner * vulns_CRITICAL

state=1 family=23 severity=3 level=major      ## Antivirus * vulns_HIGH

state=1 family=23 severity=4 level=major      ## Antivirus * vulns_CRITICAL

## FOR CLIENT SIDE MAIL CLIENT (SMTP Client) VULNERABILITIES ASSESSMENT

[Profile_Mail_Client]

state=1 family=12     ## Mail Client

## FOR CLIENT SIDE WEB BROWSER OR CLIENT VULNERABILITIES ASSESSMENT

[Profile_Web_Client]

state=1 family=6      ## Web Client

state=1 family=18      ## RSS Reader

## FOR CLIENT SIDE SECURITY TOOLS (NETASQ Tool - Antivirus - Security Scanner) VULNERABILITIES ASSESSMENT

[Profile_Security_Tools]

state=1 family=21     ## NETASQ Tool

state=1 family=22     ## Security Scanner

state=1 family=23     ## Antivirus

## FOR ADMIN TOOLS (SSH Client - FTP Client - OS - Misc - System Tools) VULNERABILITIES ASSESSMENT

[Profile_Admin_Tools]

state=1 family=1 targetclient=1 ## SSH

state=1 family=8      ## FTP Client

state=1 family=9 targetclient=1## Misc

state=1 family=15     ## Operating Systems

state=1 family=20     ## System Tool

## FOR ALL VULNERABILITIES  ASSESSMENT

[Profile_All]

state=1 severity=1 level=minor

state=1 severity=2 level=minor

state=1 severity=3 level=major

state=1 severity=4 level=major