Connecting to Tenable.sc

[Mike Riforgiate]

Tenable.sc Configuration

To add a TNS-authenticated user account as an administrator user:

1. Log in to Tenable.sc via the user interface.
2. Click Users > Users.

   The Users page appears.

3. Click Add.

   The Add User page appears.

4. Select a Role.
5. Select Security Manager as the Role, select an Organization.
6. (Optional) Type a First Name and Last Name.
7. Type a Username and Password for the user.
8. If the Type drop-down box is visible, select TNS.
9. (Optional) Enable User Must Change Password.
10. Select a Time Zone.
11. (Optional) Select a Scan Result Default Timeframe.
12. (Optional) Enable Cached Fetching.
13. (Optional) Enable Dark Mode for the user.
14. (Optional) Type Contact Information for the user.
15. Click Submit.

    Tenable.sc saves your configuration.

Generate API Keys

Required User Role: Administrator or organizational user with appropriate permissions. For more information, see User Roles.

API keys allow you to authenticate as a specific user for Tenable.sc API requests. Administrators can generate API keys for any user account. Other roles can generate API keys for user accounts with the same role. For more information, see API Key Authentication.

Note: If you generate API keys for a user that already has API keys, the old keys will be replaced. If you delete existing keys or generate new API keys for a user, Tenable.sc deauthorizes API requests attempted with the old keys.

Before you begin:

• Enable API keys to allow users to perform API key authentication, as described in Enable API Key Authentication.

To generate API keys:

1. Log in to Tenable.sc via the user interface.
2. Click Users > Users.

   The Users page appears.

3. In the row for the user for which you want to generate an API key, click the  menu.

   The actions menu appears.

4. Click Generate API Key.

   A confirmation window appears.

5. Click Generate.

   The Your API Key window appears, displaying the access key and secret key for the user.

6. Save the API keys in a safe location.

   Note: You cannot view API secret keys in the Tenable.sc interface after initial generation. If you lose your existing secret key, you must generate new API keys.

 

Precinct Configuration

• Go to Admin > SOAR > Tenable.sc Vulnerability Management > Config
• Click the checkbox for Enable Tenable Vulnerability Management API
• Paste the Server IP, Access Key and Secret Key
• Click the disk icon (Save)
• Click Jobs and go to Artifacts from Tenable.sc Vulnerability Management
• Select Triggers, expanding Manual Trigger and Interval Trigger. 
  • Toggle both to State: ENABLED
• The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization.
• Click the disk icon (Save)

 

Tenable.sc documentation

[Author]

Posts