To allow remote access to Greenbone (GVM) on Kali Linux, you need to change the default configuration because, by default, the services only listen on 127.0.0.1 (localhost) for security reasons.

You must modify two components: gvmd (the manager) and gsad (the web interface).

Step 1: Modify the Web Interface (gsad)

The Greenbone Security Assistant (the web UI) needs to be told to listen on your network interface rather than just localhost.

1. Open the configuration file: sudo nano /lib/systemd/system/gsad.service

2. Find the line starting with ExecStart.

3. Change --listen=127.0.0.1 to --listen=0.0.0.0 (to listen on all interfaces) or to your specific static IP.

    

4. Ensure the --port=9392 is set.

5. Save and exit.

Step 2: Modify the Manager (gvmd)

THIS IS NOT ALWAYS REQUIRED

If you plan to use the PHP API/GMP protocol we discussed earlier from a remote machine, you must also expose the manager.

1. Open the manager service file: sudo nano /lib/systemd/system/gvmd.service

2. Find the ExecStart line.

3. Add or modify: --listen=0.0.0.0 --port=9390

4. Save and exit.

Step 3: Reload and Restart Services

Whenever you modify a .service file, you must tell systemd to refresh its cache.

sudo systemctl daemon-reload
sudo systemctl restart gvmd
sudo systemctl restart gsad

Step 4: Verify the Ports are Listening

Check if Kali is now listening on the external interface:

sudo ss -tunlp | grep -E '9390|9392'

You should see 0.0.0.0:9392 and 0.0.0.0:9390.

Step 5: Configure the Kali Firewall (ufw)

Kali doesn't always have the firewall enabled by default, but if you are using ufw, you must allow the traffic:

sudo ufw allow 9392/tcp  # Web UI
sudo ufw allow 9390/tcp  # API/GMP