Nessus Audit Compliance Scans and Templates

When you upload an audit compliance scan result (*.nessus) information is the XML result file is parsed, matched to a checklist template type, and then merged into a new checklist in a system. There is information on creating checklists by uploading audit compliance scans and matching them automatically to templates in the Checklist Help Area.

When an audit compliance scan result is uploaded, it is first matched to any checklist that shares the same hostname and checklist type in the system it is being uploaded in. If that is not matched, then the checklist type is searched for templates by custom template, system template, then company template, then DISA or CIS template in that order.

Currently the Audit Compliance scans should be based on the DISA Benchmark so it matches on the vulnerability information in the DISA based checklists. Or a CIS .audit file uploaded to generate a CIS-based checklist as well.

---