Tenable.sc
Powered by Nessus technology, Tenable.sc is a suite of on-premises vulnerability management products, including a scanner, which can directly import findings into PlexTrac via API.
This is a licensed feature. Contact your Account Manager to add this integration to your PlexTrac instance.
PlexTrac's integration was built off Tenable.sc version 5.19 using the POST version of the /analysis endpoint (
POST/rest/analysis{parameters}). More information on this endpoint and parameter filter definitions can be found on the Tenable website. The imported data is filtered by dates defined in the parameters of the endpoint, and a value from the filter parameter lastSeen is selected when the data is imported into PlexTrac as a finding (click here for more information).Only one Tenable.sc integration is allowed per PlexTrac instance.
The Tenable.sc integration is a micro service executed via a report findings import that involves the following process:
- PlexTrac's backend makes a request to the customer's Tenable SC instance
- PlexTrac's pulls the requested data
- PlexTrac transforms the data into a format that can be imported into the report
- PlexTrac imports the data into an existing report
Once the data has been imported, the user is alerted via the notification bell within PlexTrac. A notification is also sent if an import failure occurs.
Please reach out to [email protected] for more information on preparing your environment prior to completing the setup in the platform.
A Tenable.sc API Access and Secret key that has Administrator [64] permissions will need to be generated before beginning this process. Visit Tenable's Enable API Key Authentication page for more information.
Step 1: From the Admin Dashboard, click Integrations under "Tools & Integrations".
Step 2: If the tenant is licensed, the option to connect will appear (if not, the box will display a lock icon with "License required" next to it). Click the tenable.sc box.
Step 3: Click Configure tenable.sc Integration.
Step 4: Enter the Access Key and Secret Key. Unless hosting a PlexTrac instance, leave the Tenable Domain field blank. Click Save.
Step 5: The integration details appear on the page. Click Sync Now.
If the keys are correct no error message will appear and a confirmation message will confirm successful synchronization.
Once set up, findings can be imported into a report and instructions on this process can be found here.
Last modified 14d ago