Integrating NeXpose Enterprise with Core Impact¶

*NOTE:This topic involves features that are only available in the Consultant or Enterprise version of NeXpose. See NeXpose Editions for more information.

1. In NeXpose, create a new report and from the Report Format pull-down, select the QualysGuard (tm) Compatible XML Format option. Select the assets you wish to import into Core Impact from the Content screen of the Report settings. Save your new report, and allow it to generate.
   
2. When the report is generated, save the resulting XML file and give it a unique name. A good practice to use is to give it the same name as the Core Impact session you intend to import into. Copy the XML file to your system running Core Impact.
3. Launch Core Impact and open the session you wish to import into (or create a new session). In the Core Impact GUI, click on the Modules tab on the left pane to bring up the tree of all Core Impact modules. Double-click the folder labeled Import-Export. Find the module called "Import Output from QualysGuard" and double-click it.
   
4. In the QualysGuard import window, click the button by the QUALYS OUTPUT FILES option and browse to the location where you copied your XML file from NeXpose. Select that file and click OK. Finally, click the OK button in the QualysGuard import window.
   
5. Core Impact will import devices and discovered vulnerabilities.
   

Known Issues¶

Operating Systems are not correctly applied to the devices, even though they are present in the XML file. Discovered ports and services are not included in the export, so they do not appear in Core Impact. Importing into an existing Core Impact session will wipe-out already discovered attributes such as ports and OS.