Tenable Vulnerability Management Connector

Tenable Vulnerability Management allows security and audit teams to share multiple Tenable Nessus, Tenable Nessus Agent, and Tenable Nessus Network Monitor scanners, scan schedules, scan policies, and scan results among an unlimited set of users or groups. Tenable connector fetches Export Vulnerabilities through the Tenable REST API.

Pre-requisites

• Access Key
• Secret Key

Reference Document:

• Tenable API Reference

How to derive the prerequisites?:

• Login to your Tenable IO cloud console
• Select the Vulnerability Management product.
• Navigate to Settings > Access Control
• Click “Create User”
• On the General page
  • Populate the name, email, and password information per your organizations standards
  • Select the “Scan Operator” role
  • Click “Next”
• On the User Groups page
  • Choose the appropriate user group(s) such as “All Users”
  • Click “Next”
• On the Permissions page
  • Select “Asset Discovery”
  • Click “Save”
• Edit the newly created user by clicking on it
• Click on “More” in the API Keys section > Generate API Keys > Replace & Generate
•  Copy the Access Key and Secret Key 
•  Click “Save”

Configurations:

The following are the configurations to forward the vulnerability logs to DNIF:

Field Name	Description
Connector Name	Enter a name for the connector
Access Key	Enter Access Key
Secret Key	Enter Secret Key

• Click Save after entering all the required details and click Test Connection, to test the configuration.
• A Connection successful message will be displayed on screen along with the time stamp.
• If the connection is not successful an error message will be displayed. Refer Troubleshooting Connector Validations for more details on the error message.

Once the connector is configured, validate if the connector is listed under Collection Status screen with status as Active. This signifies the connector is configured successfully and data is ready to ingest.