Skip to main content

Tenable Security Center

Integrating Tenable Security Center with ThreatDefence​

Tenable Logo

Introduction​

Nessus is a popular vulnerability scanner used by numerous organizations to scan networks for security vulnerabilities and compliance issues. This guide provides instructions for integrating Tenable Security Center into the ThreatDefence SIEM platform, so Nessus scan reports can be imported into the ThreatDefence platform and converted into SIEM data.

The integration guide assumes a local Tenable Security Centre appliance (on premises deployment).

Tenable Security Centre provides access to resources (data entities) via REST API paths. The SIEM platform will use the REST API to make HTTP requests to retrieve scan data.

URIs for SecurityCenter's REST API resource have the following structure:

https://host:port/rest/resource-name

To access the API paths, the integration requires an API Access Key and Secret Key. For more information, see the Generate API section in the Tenable Security Center User Guide: https://docs.tenable.com/security-center/Content/GenerateAPIKey.htm

Integration Steps​

To activate the integration, supply the following information to your ThreatDefence representative:

  • The IP address of your Tenable Security Center.

  • Your generated Tenable Security Center access key and secret key. For more information, see Enable API Key Authentication and Generate API Keys.

  • (Optional) Scan names to import from the Tenable Security Center.

If not set, all scans the API user has access to will be imported.