Creating and managing internal Agents

What is an internal Agent?

In order for Vonahi Security to perform an internal penetration test, we must have some kind of access to the internal network environment, unless the goal is to perform an external penetration test that leads into an internal.

An internal Agent is essentially just a system that allows us to connect to it internally in order to perform an internal security assessment -- whether it's a penetration test or a vulnerability assessment.

In order to create an internal Agent, you need to have a company that you want the Agent associated to, at minimum. If you don't already have this set up, refer to Creating and managing companies.

If you don't already have an Agent installed, refer to Deploying the Agent from an ISO to learn how to install the VM.

Creating an internal Agent

  1. Click Internal Agents in the left navigation menu.
  2. Click New Agent.
  3. Fill in the details for the Agent and the company it belongs to.

  4. Take note of the UUID.

  5. Register your internal Agent. Log in to your vPenTest Agent, which should provide the vPenTest Agent menu to you, as shown in the following screenshot:

    6. Select option 2, and provide the UUID that you observed in step 4. If you have any issues getting your VM started, logged in, connected to the Internet, etc., use the following two articles as references:

Swapping Agents between companies

There may be a time where you want to swap Agents between clients. Some of our partners currently do this when they ship a laptop to one customer, and then want to use the same laptop for the next client's assessment. You can accomplish this by re-assigning the Agent to another company.

IMPORTANT  It should be noted that all of the assessment data is purged away upon completing an assessment, so none of the data from one client will be transferred to another client's network during this process.

  1. Click Internal Agents in the left navigation menu.
  2. Click the Actions button for the Agent that you want to switch companies for, and then click Edit Agent Details.
  3. Use the Company drop-down menu to select a client that the Agent should belong to.

After you change the company to which the Agent belongs, you will then be able to schedule an assessment using that Agent and the company.