Tenable.sc
Powered by Nessus technology, Tenable.sc is a suite of on-premises vulnerability management products, including a scanner, which can directly import findings into PlexTrac via API.
This is a licensed feature.
PlexTrac's integration was built off Tenable.sc version 5.19 using the POST version of the /analysis endpoint (
POST/rest/analysis{parameters}). More information on this endpoint and parameter filter definitions can be found on the Tenable website. The imported data is filtered by dates defined in the endpoint's parameters, and a value from the filter parameter lastSeen is selected when the data is imported into PlexTrac as a finding (click here for more information).Only one Tenable.sc integration is allowed per PlexTrac instance.
The Tenable.sc integration is a microservice executed via a report findings import that involves the following process:
- PlexTrac's backend requests the customer's Tenable SC instance
- PlexTrac pulls the requested data
- PlexTrac transforms the data into a format that can be imported into the report
- PlexTrac imports the data into an existing report
Once the data has been imported, the user is alerted via the notification bell within PlexTrac. A notification is also sent if an import failure occurs.
Contact [email protected] for more information on preparing your environment before completing the setup in the platform.
A Tenable.sc API Access and Secret key with Administrator [64] permissions will need to be generated before beginning this process. Visit Tenable's Enable API Key Authentication page for more information.
Step 1: From the Admin Dashboard, click Integrations under "Tools & Integrations".
St." 2: If the tenant is licensed, the option to connect will appear (if not, the box will display a lock icon with "License required" next to it). Click the tenable.sc box.
Step 3: Click Configure tenable.sc Integration.
Step 4: Enter the Access Key and Secret Key. Unless hosting a PlexTrac instance, leave the Tenable Domain field blank. Click Save.
Step 5: The integration details appear on the page. Click Sync Now.
If the keys are correct, no error message will appear, and a confirmation message will confirm successful synchronization.
Once set up, findings can be imported into a report, and instructions on this process can be found here.
Last modified 1mo ago