I have nessus professional 8.14.0 installed on a server, which is attached to the network, 3 esxi 6.7 hosts and 1 vcenter servers.
Nessus Server (192.168.1.21)
vCenter Server (192.168.1.9)
ESXi Host 1 (192.168.1.10)
ESXi Host 2 (192.168.1.11)
ESXi Host 3 (192.168.1.12)
If I run a scan with just host 1 (192.168.1.10) in the targets.
Warning
Possible Reasons :
- VMware vSphere Username/Password were not supplied.
- Unable to authenticate with the VMware vCenter server on port 443.
If I run a scan with just host 1 (192.168.1.10) and vCenter (192.168.1.9) in the targets.
On host vCenter server I get about 68 warnings.
On host 1 I get:
Possible Reasons :
- VMware vSphere Username/Password were not supplied.
- Unable to authenticate with the VMware vCenter server on port 443.
The complicanse file I am using is "cis vmware esxi 6.7 v1.1.0 level 2" or "cis vmware esxi 6.7 v1.1.0 level 1"
Settings:
Target: 192.168.1.9, 192.168.1.10 or just 192.168.1.10
VMWare vCenter SOAP API:
I have also tried the bare metal scans, which ask for ssh creds, however the Credentials scans = No, which will not do.
Any suggestions on what I am missing?
I have double checked and tripple check the password,
From the nessus host I can telnet to vCenter and Host 1 on port 443.
How do I test the SOAP API access? I have googled to the end of google and cannot find out how this is done.
