Nessus Patch Management Integration Now Supports IBM Tivoli Endpoint Manager
Nessus and SecurityCenter now support Tivoli Endpoint Manager (TEM) as a patch management platform in which patch-level information can be extracted for given scan targets.
Nessus Patch Management Support
We are pleased to announce new support for IBM Tivoli Endpoint Manager (TEM) for Patch Management (formerly known as BigFix). This new capability allows us to use the information gathered by TEM from systems where we may not have credentials or we’re unable to reach such systems over the network. The TEM integration is configured similarly to our integration with other patch management solutions where credentials and the server IP address/hostname are provided so Nessus can retrieve the patch information for the hosts targeted in the scan.
- Microsoft Windows Server Update Services (WSUS)
- Microsoft System Center Configuration Manager (SCCM) 2007
- Red Hat Network Satellite Server
- VMware Go (formerly known as Shavlik)
In order to make use of this feature, be certain you've configured TEM properly. Refer to this discussion post for more information and instructions.
Configuring Nessus Integration with Tivoli Endpoint Manager
To enable this feature, create a Nessus scan policy and enable the Nessus plugin named "Patch Management: Tivoli Endpoint Manager Report."
Click for larger image.
Also enable all plugins in the "Windows: Microsoft Bulletins" family.
Next, in the Preferences tab, select "Patch Management: IBM Tivoli Endpoint Manager" from the drop-down menu. Enter the IP address or hostname of your TEM system, the Web Report port, and valid credentials. If your server is configured to use SSL, be certain to check the "SSL" checkbox.
When performing the scan, if Nessus is able to log in to the target host, the corresponding Nessus local patch-checking plugins will be run. This ensures the greatest level of accuracy for the check being performed.
If Nessus is unable to log in to the target host, and fingerprints such host as a Windows system, it will query the TEM for the patch information. If Nessus sees that the host is not being managed by the TEM solution, then it will report it as an unmanaged host.
This information will allow administrators to determine which hosts may be outside of the enforcement of policies configured in their patch and configuration management solution. Nessus will also identify the information source for the specific local check in the Plugin Output section:
Click for larger image
Conclusion
Nessus’ ability to leverage the information from patch and configuration management solutions provides deeper insight into systems that may have been previously missed in scans. This added information also provides administrators a way to validate that all hosts are managed under their patch and configuration solutions, and that such solutions are providing the appropriate information.
Related Articles
Study: Tenable Offers Fastest, Broadest Coverage of CISA's KEV Catalog
October 23, 2023Tenable ranked first in multiple vulnerability management categories, including the most comprehensive coverage and quickest detection of CISA's Known Exploited Vulnerabilities, according to a Miercom report commissioned by Tenable.
Tuning Network Assessments for Performance and Resource Usage
September 13, 2022Using the correct tool for the job and optimizing scanner placement will have a large impact on scan efficiency with Nessus, Tenable.io and Tenable.sc.
Terrascan Joins the Nessus Community, Enabling Nessus To Validate Modern Cloud Infrastructures
May 17, 2022The addition of Terrascan to the Nessus family of products helps users better secure cloud native infrastructure by identifying misconfigurations, security weaknesses, and policy violations by scanning Infrastructure as Code repositories.
Operational Technology in the DoD: Ensuring a Secure and Efficient Power Grid
April 19, 2024In an evolving threat landscape, the DoD must make sure that its mission-critical operations don’t experience power outages.
Cybersecurity Snapshot: Cyber Agencies Offer Secure AI Tips, while Stanford Issues In-Depth AI Trends Analysis, Including of AI Security
April 19, 2024Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. Plus, Stanford University offers a comprehensive review of AI trends. Meanwhile, a new open-source tool aims to simplify SBOM usage. And don’t miss the latest CIS Benchmarks updates. And much more!
Tenable and Thales Collaborate to Provide Cyber Defense Simulations to Better Secure Operational Technology Environments
April 18, 2024The heart of the Welsh Valleys is home to the Thales Ebbw Vale campus, a world-class facility jointly funded by the Welsh government as part of its regeneration program for the region. At the core of the facility is the Cyber Range, a simulation and virtualization platform for training, testing, exercising and R&D. Tenable has joined the lineup of solutions used to run real world simulations in this controlled environment.
- Nessus
- Patch Auditing
- SecurityCenter