---
# This configuration file defines all the particular options necessary to support the Cisco pxGrid Nexpose Integration.
# Fields marked (M) are mandatory.
#
# (M) Batch mode delay.
# Timeframe in seconds for which to wait before scanning connected devices with the 's' for seconds. Default 60s is considered "Realtime".
:batch_mode_delay: 60s
# (M) Enables logging to the log directory.
:logging_enabled: true
# (M) Sets the log level threshold for output.
:log_level: info
# (M) Number of connections. The number of simultaneous connections we can maintain to Nexpose for scanning.
:nexpose_connection_max: 3
# Nexpose options.
:nexpose_data:
  # (M) Nexpose console hostname.
  :nxconsole: 127.0.0.1
  # (M) Nexpose username.
  :nxuser: nxadmin
  # (M) Scan engine to use. A value of '-1' indicates use of the default engine.
  :engine: -1
  # (M) Risk score threshold used to quarantine an asset. If an asset has a risk score equal to or larger than this value it will be quarantined.
  :riskscore: 20
  # (M) Time to wait before cancelling a scan and continuing.
  :scan_timeout: 3600
  # (M) Nexpose scan template ID to be used while creating temporary Site for scanning.
  :scan_template_id: full-audit
  # (M) The port Nexpose listens on. Default is 3780
  :nexpose_port: 3780
# Cisco pxGrid options. Note all of these options can be set through environment variables of the same capitalised name e.g. ISE_URL instead of :ise_url
:pxg_data:
  # Cisco Identity Services Engine hostname/ip.
#  :ise_url: 127.0.0.7
  # Secondary Cisco Identity Services Engine hostname/ip.
#  :secondary_ise_url: 127.0.0.8
  # Cisco Identity Services Engine username.
#  :ise_username: admin
  # Cisco Identity Services Engine password.
#  :ise_password: Nxadmin1!
  # Keystore passphrase (Keystore located at pxnx/keystore.jks)
#  :keystore_password: nxadmin
  # Truststore passphrase (Truststore located at pxnx/truststore.jks)
#  :truststore_password: nxadmin
:encryption_options:
  # (M) Path to the encryption.config file. Generally should not be modified.
  :directory: '../../config/encryption.config'