Is it need to create insights if you will implement IVR pulling data from TenableSC ?
They released this version which have direct integration with Tenable.SC - BigFix Insights for Vulnerability Remediation 4.1.0 is Available Now!
Thanks for the reply. Yes they have which that version we used but thia is what we encountered im webui ivr app.
Have you been through the documentation linked above, specifically the Setup Instructions at IVR v.4 setup process ?
To configure IVR with out Insights there is another installer you need to run,
Once the .exe file is downloaded to the C:\Program Files (x86)\BigFix Enterprise\BESIvrRetriever location, open Command Prompt as an Administrator and navigate to the folder where the executable is located. Run the setup command:
ivrNext.exe --setup
@julius.susmina please follow the documentation - there are different instruction for using IVR version 4 versus the old IVR version
Yes we did that process. That service was running fine so we thought that we are good but when we checked in webui ivr app as of we did not configured any.
Yes we did that process.
I also created a ticket to hcl support and advised me that ivr 4.1 must have insights inorder to pull data from tenablesc.
It doesn’t need Insights for Tenable.SC. See notes from @gus at BigFix Insights for Vulnerability Remediation 4.1.0 is Available Now! - #4 by gus
Yes that is what we did to use ivr4.1 since we are using TenableSC.
I’m not sure if you still have issues, but WebUI must be able to connect to the IVR Retriever service which by default listens on port 9011. Assumes that the retriever is configured, and has injected vulnerability data from Tenable.SC into the new BFIVR database.
Check the ivrn.log in the BESIvrRetriever\data\logs folder.
Yes, I can see data but its not shwing in webui–> app–> ivr
You have not confirmed if you can reach the retriever process from Webui.
Also confirm if errors in ivr.log on WebUI, or ivrn.log on Retriever
How to check webui if can reach retriever? No errors in ivr.logs. I can see some new asset detected…in the ivr logs.
Any of you guys that successfully installed ivr 4.1 that used tenablesc?
I upgraded by sandbox environment a few weeks ago that points to TenableSC and its not working. I have a case open and its slowly making its way to L3. Basically IVR seems to be working but the WebUI always says “No results found”
Thanks. That is why i posted asking if there are any who succesfully deployed ivr 4.1. I which i dont read any aside from you. Thanks again.
Hi Julius, you will have the IVR Retriever service running on some server, and that service should be running. That service listens on port 9011 by default.
You should verify, via a powershell test-netconnection’ as an example, that WebUI can reach that service on the Server where the Retriever is installed.
eg. On WebUI… tnc hostname_of_retriever -port 9011
I found that I had to add Defender firewall rules on my Retriever server to allow incoming connections to that service.
Ok i will try this and update you asap. Thanks.
I just tried this but port 9011 is open on my server, but still nothing.