Links

Tenable.sc

Powered by Nessus technology, Tenable.sc is a suite of on-premises vulnerability management products, including a scanner, which can directly import findings into PlexTrac via API.
This is a licensed feature.
PlexTrac's integration was built off Tenable.sc version 5.19 using the POST version of the /analysis endpoint (POST/rest/analysis{parameters}). More information on this endpoint and parameter filter definitions can be found on the Tenable website. The imported data is filtered by dates defined in the endpoint's parameters, and a value from the filter parameter lastSeen is selected when the data is imported into PlexTrac as a finding (click here for more information).
Only one Tenable.sc integration is allowed per PlexTrac instance.

Integration Process

The Tenable.sc integration is a microservice executed via a report findings import that involves the following process:
  • PlexTrac's backend requests the customer's Tenable SC instance
  • PlexTrac pulls the requested data
  • PlexTrac transforms the data into a format that can be imported into the report
  • PlexTrac imports the data into an existing report
Once the data has been imported, the user is alerted via the notification bell within PlexTrac. A notification is also sent if an import failure occurs.

Setting up the Environment

Contact [email protected] for more information on preparing your environment before completing the setup in the platform.

Integrating Tenable SC

A Tenable.sc API Access and Secret key with Administrator [64] permissions will need to be generated before beginning this process. Visit Tenable's Enable API Key Authentication page for more information.
Step 1: From the Admin Dashboard, click Integrations under "Tools & Integrations".
St." 2: If the tenant is licensed, the option to connect will appear (if not, the box will display a lock icon with "License required" next to it). Click the tenable.sc box.
Step 3: Click Configure tenable.sc Integration.
Step 4: Enter the Access Key and Secret Key. Unless hosting a PlexTrac instance, leave the Tenable Domain field blank. Click Save.
Step 5: The integration details appear on the page. Click Sync Now.
If the keys are correct, no error message will appear, and a confirmation message will confirm successful synchronization.
Once set up, findings can be imported into a report, and instructions on this process can be found here.
© 2023 PlexTrac, Inc. All rights reserved.