Skip to main content

Cloud ConnectorsExabeam Cloud Connectors Configuration Guide

Rapid7 InsightVM Cloud Connector

Rapid7 InsightVM is an advanced vulnerability management analytics and reporting solution from Rapid7 which uses the Rapid7 Insight platform. Using the cloud-based security and data analytics platform, Rapid7 InsightVM collects vulnerability data and provides live vulnerability and endpoint analytics. Rapid7 InsightVM provides visibility into the risks caused by network footprint, including cloud, virtual, and endpoints. For more information see the Rapid7 InsightVM product information.

Audit Source API and Security Event Support for the Rapid7 InsightVM Cloud Connector

The following table displays audit source API and security events supported by the connector.

Audit Source: API

Events Included

Report

Rapid7 InsightVM vulnerability reports

Prerequisites to Configure the Rapid7 InsightVM Cloud Connector

Before you configure the Rapid7 InsightVM connector you must complete the following prerequisites:

  • Obtain the username and password of a Rapid7 InsightVM user that has an assigned role with the following permissions:

    • View Site Asset Data

    • Manage Policies

    • Manage Reports

    • Manage Reports

    You can use an existing Rapid7 InsightVM user or create a new user. For more information about creating users and assigning roles, see the Rapid7InsightVM documentation.

  • Obtain the URL for the security host:

    • Cloud-native (SaaS): Not supported

    • Cloud-hosted deployments – (Single tenant only) Use the format https://<host>.cloud.rapid7.com.

    • On-premises deployments – Use the format https://<host>:<port> where <host> is the IP address of the machine where Rapid7 InsightVM is deployed and <port> is the UI port of Rapid7 InsightVM. By default, the value for the port is 3780.

    Make sure to allow access between the Exabeam Cloud Connectors platform and the host for the InsightVM security console. The URL must be routable from the Exabeam Cloud Connectors platform. Verify that you can reach the host (using ping if allowed, for example) before proceeding to Configure the Rapid7 InsightVM Cloud Connector.

  • Download the SSL certificate from the Rapid7 InsightVM console and import the SSL certificate on your Exabeam Cloud Connectors platform.

    For cloud-delivered deployments, contact Exabeam Support to assist with the SSL certificate.

    For on-premises deployments, you can import the certificate directly onto the machine that hosts the Exabeam Cloud Connectors platform (see Add an SSL Certificate to the Cloud Connector Trusted Certificates Store Manually or Add an SSL Certificate to the Cloud Connector Trusted Certificates Store Using a Script).

Configure the Rapid7 InsightVM Cloud Connector

To configure the Rapid7 InsightVM Cloud Connector to import data into the Exabeam Cloud Connector platform:

  1. Before you configure the cloud connector, ensure you review the Prerequisites to Configure the Rapid7 InsightVM Cloud Connector.

  2. Log in to the Exabeam Cloud Connectors platform with your registered credentials.

  3. Navigate to Settings > Accounts > Add Account.

  4. Click Select Service to Add, then select Rapid7 InsightVM from the list.

  5. In the Accounts section, enter the required information. Required fields are indicated with a red bar.

    1. Account Name – Specify a name for the Rapid7 InsightVM connector. For example, Corporate vulnerability management.

    2. Description – (Optional) Describe the purpose of the Rapid7 InsightVM connector. For example, Rapid7 InsightVM advanced vulnerability management analytics and reporting solution.

    3. User – Enter the username of the Rapid7 InsightVM user that you obtained while completing prerequisites.

    4. Password – Enter the password for the user, that you obtained while completing prerequisites.

    5. URL – Enter the URL that you obtained while completing prerequisites. The format of the URL differs depending on whether your deployment is cloud-delivered or on-premises. See Prerequisites to Configure the Rapid7 InsightVM Cloud Connector.

  6. To confirm that the Exabeam Cloud Connector platform communicates with the service, click Test Connection.

  7. Click Done to save your changes. The cloud connector is now set up on the Exabeam Cloud Connector platform.

  8. To ensure that the connector is ready to send and collect data, Start the connector and check that the status shows OK.