Tenable SC

Tenable Security Center (previously, Tenable SC) automatically discovers and assesses an environment for vulnerabilities, misconfigurations, and other cybersecurity issues.

Lucidum uses the Tenable Security Center connector to ingest data from Tenable.sc.

For more information about Tenable and Lucidum, see https://lucidum.io/tenable/.

Requirements

To use the Tenable connector in Lucidum:

1. Before configuring the Tenable connector in Lucidum, you must first define credentials for Lucidum in the Tenable API.

2. You can then configure the Tenable connector in Lucidum and start ingesting data from Tenable.

Define Credentials for Lucidum in Tenable

To generate an API key in the Tenable console:

1. Log in to Tenable Security Center via the user interface.

2. Click Users > Users. The Users page appears.

3. Select the check box for the user for which you want to generate an API key. The available actions appear at the top of the table.

4. Click API Keys > Generate API Key. A confirmation window appears.

5. Click Generate. The Your API Key window appears, displaying the access key and secret key for the user.

6. Copy the new access key and secret keys to a safe location.

7. For details, see https://docs.tenable.com/security-center/Content/GenerateAPIKey.htm

Note: You cannot view API secret keys in the Tenable Security Center interface after initial generation. If you lose your existing secret key, you must generate new API keys.

Configuring the Tenable Connector

To configure Lucidum to ingest data from Tenable:

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector for Tenable.sc. Click Connect. The Settings page appears.

   

5. In the Settings page, enter the following

   • Host. The hostname of the Tenable server.

   • Access Key. Enter the value for the API Key that you generated in the previous section.

   • Access Secret. Enter the value for the API Secret that you generated in the previous section.

   • Verify SSL. Optional. Default value is False.

     • True. Validate that the server certificate matches the expected certificate, usually the locally trusted root certificate used in the browser. If you are connecting to an API via HTTPS, you can select this option.

     • False. Do not validate the certificate.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.

Supported Actions

The Tenable connector supports these Actions:

• Add IPs to Tenable Scan