# Tenable Vulnerability Management

Tenable Vulnerability Management (VM) is a suite of cloud vulnerability management products that can export findings into PlexTrac via API. 

Multiple integrations can be configured per instance or for specific clients.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F6R3DSRFE52j1fI2Zxlno%2FTenable-Logo2021.png?alt=media&#x26;token=a9017b38-7c59-402c-9758-e8922bc460ed" alt="" width="188"><figcaption></figcaption></figure></div>

{% hint style="info" %}
This is a licensed feature.
{% endhint %}

## Field Mappings

Below are the field mappings from Tenable to PlexTrac, broken up by findings and assets.&#x20;

Tables include the following columns:

* **Tenable VM Field:** the field name in Tenable VM
* **Direction:** displays the direction in the flow of data occurring for the integration
* **PlexTrac Field:** the field name in PlexTrac

{% hint style="info" %}
PlexTrac only imports vulnerabilities that Tenable has not archived.&#x20;
{% endhint %}

### Findings Field Mappings

If a field is not listed, then PlexTrac does not currently import.

| Tenable VM Field       | Direction | PlexTrac Field                               |
| ---------------------- | :-------: | -------------------------------------------- |
| Vulnerability Name     |    -->    | Finding Name                                 |
| Description            |    -->    | Description                                  |
| Solution               |    -->    | Recommendations                              |
| See Also               |    -->    | References                                   |
| Status                 |           |                                              |
| *Active*               |    -->    | *Finding="OPEN"*                             |
| *New*                  |    -->    | *Finding="OPEN"*                             |
| Severity               |           |                                              |
| *Info*                 |    -->    | *Informational*                              |
| *Low*                  |    -->    | *Low*                                        |
| *Medium*               |    -->    | *Medium*                                     |
| *High*                 |    -->    | *High*                                       |
| *Critical*             |    -->    | *Critical*                                   |
| CVE                    |    -->    | CVE                                          |
| CVSS3                  |    -->    | Score Type                                   |
| CVSS3                  |    -->    | Score Vector                                 |
| CVSS3                  |    -->    | CVSS Score                                   |
| Vulnerability Tags     |    -->    | Finding Tags                                 |
| Plugin ID              |    -->    | Custom Field "Tenable Plugin ID"             |
| Scan ID                |    -->    | Custom Field " Tenable Scan ID"              |
| VPR                    |    -->    | Custom Field "Tenable VPR"                   |
| Exploit Available      |    -->    | Custom Field "Tenable Exploit Available"     |
| Vulnerability Synopsis |    -->    | Custom Field "Tenable Synopsis"              |
| Threat Intensity       |    -->    | Custom Field "Tenable Threat Intensity"      |
| Exploit Code Maturity  |    -->    | Custom Field "Tenable Exploit Code Maturity" |
| Age Of Vuln            |    -->    | Custom Field "Tenable Age Of Vuln"           |
| Product Coverage       |    -->    | Custom Field "Tenable Product Coverage"      |
| CVSS Impact Score      |    -->    | Custom Field "CVSS Impact Score              |
| Plugin Family          |    -->    | Custom Field " Tenable Plugin Family"        |
| Plugin Type            |    -->    | Custom Field "Tenable Plugin Type"           |
| Scan Completed At      |    -->    | Custom Field "Tenable Scan Complete Date"    |
| THREAT SOURCES         |    -->    | Custom Field "Tenable Threat Sources"        |

### Assets Field Mappings

If a field is not listed, then PlexTrac does not currently import.

| Tenable VM Field            | Direction |       PlexTrac Field      | Notes                                                                                                                    |
| --------------------------- | --------- | :-----------------------: | ------------------------------------------------------------------------------------------------------------------------ |
| Plugin Output               | -->       | Affected Asset "Evidence" |                                                                                                                          |
| Asset Name                  | -->       |         Asset Name        | PlexTrac searches for the first known value in the following order: `FQDN` > `Hostname` > `ipv4` > `ipv6` > `asset_uuid` |
| IP                          | -->       |      Know IP Address      |                                                                                                                          |
| Hostname                    | -->       |         Host Name         |                                                                                                                          |
| Operating System            | -->       |      Operating System     |                                                                                                                          |
| Fully Qualified Domain Name | -->       |            FQDN           |                                                                                                                          |
| MAC Address                 | -->       |        MAC Address        |                                                                                                                          |
| Tags                        | -->       |         Asset Tags        |                                                                                                                          |
| Port                        | -->       |    Affected Ports-Port    |                                                                                                                          |
| Protocol                    | -->       |  Affected Ports -Protocol |                                                                                                                          |

## Deduplication Logic <a href="#deduplication-logic" id="deduplication-logic"></a>

PlexTrac will not import findings from Tenable that have the same combination of `plugin ID` and `severity`.

## Integrating Tenable

<mark style="background-color:yellow;">Step 1</mark>: From the **Admin Dashboard**, click **Integrations** under "Tools & Integrations."

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FPfOFC2mGRPbsurePegwS%2Fimage.png?alt=media&#x26;token=d90f4c72-0428-4727-a133-87d3de55db3f" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 2</mark>: If licensed, the option to connect will appear (if not, the box will display a lock icon and "License required"). Click the **Tenable** box.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FIYdIk3W1K4nHvQuWefSr%2Fimage.png?alt=media&#x26;token=2faf9b75-cfb6-4882-95dc-17d77d497fd2" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 3:</mark> Enter a connection name and select if this integration is across the tenancy or for a client (if specific to one client, select the client of the pulldown menu). Click **Continue**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FxzqfyIAfT54Y1reynVgp%2Fimage.png?alt=media&#x26;token=e80a6fe2-50a1-4567-8b6e-b3ebf18f7057" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 4:</mark> Select "Connect to Tenable Vulnerability Management." Enter the Tenable URL, access key, and secret key. Click **Continue**.&#x20;

{% hint style="info" %}
Visit the [Tenable documentation site](https://docs.tenable.com/vulnerability-management/Content/Settings/my-account/GenerateAPIKey.htm) for more information on generating API keys.&#x20;
{% endhint %}

<figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FHuONBS6R2wI548xCt33t%2Fimage.png?alt=media&#x26;token=462c2bbe-5381-41d0-82c8-41a0db2c160b" alt=""><figcaption></figcaption></figure>

If the keys are correct, a confirmation message will confirm successful synchronization.&#x20;

<mark style="background-color:yellow;">Step 5:</mark> Edit the field mappings on the provided tabs for findings and assets, or continue using the defaults.&#x20;

Information flows only from Tenable to PlexTrac. Fields required by PlexTrac are identified with a red asterisk.&#x20;

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F7zoS3VFRdiE4yr7SnziN%2Fimage.png?alt=media&#x26;token=f2a0c905-1d36-4ec3-9d6e-a78db098ca43" alt=""><figcaption></figcaption></figure></div>

Fields that can be deleted will have an "X" next to the PlexTrac field when hovering over with the cursor. A confirmation message will appear after clicking **X**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2Fnblf1UzomT3Ss7wpvcUt%2Fimage.png?alt=media&#x26;token=251082a1-3e3f-40f6-b4b9-ae949fb69120" alt=""><figcaption></figcaption></figure></div>

Configurable fields can be adjusted by clicking the purple line and deleting the existing connection.&#x20;

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2Fw9TcbxpHUEVtY3AHN1Ky%2Fimage.png?alt=media&#x26;token=7eef0819-53f8-46c2-a912-e1d58d5467f5" alt=""><figcaption></figcaption></figure></div>

Click on the Tenable field and the desired PlexTrac field to map and create a new connection.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F3jtYapqqlPL7yHTwfCdJ%2Fimage.png?alt=media&#x26;token=cb0fcf5e-6856-4061-a530-e8fca4718a86" alt=""><figcaption></figcaption></figure></div>

Click **Continue** when finished.

The integration appears in the table as a listed connection.&#x20;

## Synchronizing

PlexTrac offers synchronization options for Tenable integrations.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FExnM7YIStLFuiiBurCJp%2Fimage.png?alt=media&#x26;token=be67dbc3-a1e2-4af9-ad0d-f44b784fe7ae" alt=""><figcaption></figcaption></figure></div>

1. **Sync:** This option conducts an off-cycle synchronization and typically takes less than ten minutes.
2. **Full Sync:** This option examines the complete Tenable database. It can take several hours, but it happens in the background and does not prevent using PlexTrac for other tasks.

### Synchronization History

To view sync history, click **Synch history** under the integration actions menu.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FyghDqajQ5hpVKqTlU1bt%2Fimage.png?alt=media&#x26;token=a676ebfb-c680-445b-8139-03cf7d42d631" alt=""><figcaption></figcaption></figure></div>

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FtVWmAGzJVmHXeOnmdocZ%2Fimage.png?alt=media&#x26;token=1e67b837-e3c3-4849-9dae-7a3508c116f8" alt=""><figcaption></figcaption></figure></div>

## Managing Integrations

Any existing integration can be disabled temporarily or deleted if no longer needed.&#x20;

### Disabling an Integration

To disable an integration, click the toggle button for the integration under the "Enabled" column. This action also disables the ability to synchronize the integration.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FcWV3Ls84ryUgtn1a8f9y%2Fimage.png?alt=media&#x26;token=c4c46846-d81f-4680-8b90-708e2fc33452" alt=""><figcaption></figcaption></figure></div>

### Deleting an Integration

To delete an integration, click the three dots under the "Actions" column and then **Delete**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FNOtNNinWIQWf2kveF0h0%2Fimage.png?alt=media&#x26;token=04094519-329e-4a9f-98c6-382b4d714af3" alt=""><figcaption></figcaption></figure></div>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.plextrac.com/plextrac-documentation/product-documentation-1/account-management/account-admin/integrations-and-webhooks/integrations-api/tenable-vulnerability-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.