Tenable automatically discovers and assesses an environment for vulnerabilities, misconfigurations, and other cybersecurity issues.
Lucidum uses the Tenable connector to ingest data from Tenable Nessus and Tenable SC.
To use the Tenable Connector in Lucidum:
Before configuring the Tenable connector in Lucidum, you must first define credentials for Lucidum in the Tenable API.
You can then configure the Tenable connector in Lucidum and start ingesting data from Tenable.
Define Credentials for Lucidum in Tenable
To generate an API key in the Tenable console:
Login to the Tenable console with an administrator account.
Click the hamburger icon (three stacked lines) in the upper left corner.
In the left pane, click Settings.
In the Settings page appears, click the My Account tile.
In the My Account page appears, in the upper-right corner, click the person button (outline of a head and shoulders).
In the user account menu appears, click My Account.
In the My Account page, click the API Keys tab.
In the API Keys section, click Generate.
In the Generate API Keys window, review the warning and click Generate.
Tenable generates an access key and a secret key and displays the new keys in the Custom API Keys section of the page.
Copy the new access key and secret keys to a safe location.
Configuring the Tenable Connector
To configure Lucidum to ingest data from Tenable:
Log in to Lucidum.
In the left pane, click Connector.
In the Connector page, click Add Connector.
Scroll until you find the Connector for Tenable. Click Connect. The Settings page appears.
In the Settings page, enter the following
Host. The hostname of the Tenable server. For Tenable IO, the default value is https://cloud.tenable.com .
Access Key. Enter the value for the API Key that you generated in the previous section.
Access Secret. Enter the value for the API Secret that you generated in the previous section.
Verify SSL. Optional. Default value is False.
True. Validate that the server certificate matches the expected certificate, usually the locally trusted root certificate used in the browser. If you are connecting to an API via HTTPS, you can select this option.
False. Do not validate the certificate.
To test the configuration, click Test.
If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.
If the connector is not configured correctly, Lucidum displays an error message.
The Tenable connector supports these Actions:
Add IPs to Tenable Scan