Openvas or NMAP in GCE

[Jonathan Armando Mejias Leon]

Hi group!

I have created an VM instance with Openvas/Greenbone app and i need to perform a periodic scanning of the services runing in the anothers VM. The question is:

- Can i use nmap to scan the ports and services running in each instance of VM without violate any security policy in the cloud?

- OpenVas scan the ports and services running in each VM (by internal IP first or could be by External IP also), can i use this in my environment?

Whats the better practice to do that?

Thanks!

[Navi Aujla (Google Cloud Support)]

Hello Jonathan 

You can use nmap and OpenVas tools to scan the ports and services running in your project environment. 

You may wants to check the Stackdriver process health alert policy[1]. In addition, check the Cloud Security Command Center[1] feature which is currently in Alpha stage providing visibility into your cloud data and services. 

[1] https://cloud.google.com/monitoring/alerts/#process-health

[2] https://cloud.google.com/security-command-center/