Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Tenable Blog

Subscribe

Upgrading from Nessus to SecurityCenter: Dynamic Asset Lists Drive Action

Note: Tenable SecurityCenter is now Tenable.sc. To learn more about this application and its latest capabilities, visit the Tenable.sc web page.

Most of us involved with vulnerability management have probably used a Nessus® filter to display specific reporting results. For example, I have used a query to select all of the Windows servers in an environment, and then report on the high and critical severity vulnerabilities. Queries like this focus analysis and increase insight from reports. Report queries are useful for vulnerability management – so valuable that their usage raises two questions in my mind.

First, can we apply queries across the entire vulnerability management process, instead of just during reporting? For example, can we define a query to refine assessments of specific assets; perhaps select Red Hat web servers running in a DMZ and then configure a vulnerability scan and tailored configuration audit to assess those systems every day?

Second, can we use queries to define criteria for grouping assets that will be automatically applied to newly discovered assets? For example, when new web servers are deployed, will the vulnerability scan and configuration audit defined above automatically detect and assess the new systems?

SecurityCenter’s dynamic asset list feature applies across the vulnerability management process

SecurityCenter’s dynamic asset list feature applies across the vulnerability management process. Plus, it automatically adds newly discovered assets to all applicable asset lists. SecurityCenter™ has the ability to parse the results of Nessus, PVS™, or LCE® event data to build dynamic lists of assets, and a single asset can be a member of multiple asset lists. For example, a dynamic rule can be created to generate a list of IP addresses that has ports 25 and 80 open. These rules can be very sophisticated and take into account addressing, open ports, specific vulnerability IDs, and discovered vulnerability content.

Intuitive forms

Intuitive forms guide dynamic asset list creation

Dynamic asset lists also direct multiple SecurityCenter functions. They can be paired with user permissions to control SecurityCenter scanning, manage blackout windows, and inform workflow. As an example application: if SecurityCenter finds a critical, exploitable vulnerability on a Red Hat web server, it can notify the system administrator responsible for the asset list via email or a ticket.

Dynamic asset lists inform reports, dashboards, and Assurance Report Cards (ARCs)

And of course, dynamic asset lists inform reports, dashboards, and Assurance Report Cards (ARCs). The Critical and Exploitable Vulnerabilities report could easily be configured to run against the Red Hat web server asset list after each daily scan, and the results could automatically be emailed to the appropriate stakeholders. Dynamic asset lists can focus dashboards to display a complete security and compliance view for all the assets in the DMZ. This view could show vulnerability trends over time, vulnerability ages, configuration compliance and more.

Dashboards

Dashboards can focus on a specific asset list

SecurityCenter includes more than 200 dynamic asset list templates that you can use out of the box or you can tailor for your specific requirements. Additionally, you can easily create your own templates using a web-based wizard.

You can also create dynamic asset lists on the fly and apply them to existing SecurityCenter data

You can also create dynamic asset lists on the fly and apply them to existing SecurityCenter data. Consider this hypothetical example: it is Friday at 4:00 p.m. and you are looking forward to going away on a weekend skiing trip. However, a new vulnerability, Heartshock, has just been publicly announced that affects FTP services on Red Hat systems 6.4 and older. You can quickly create an asset list to identify any systems in your environment that might ruin your weekend plans. What’s really amazing is that this asset list doesn’t require a new scan! Rather, it will run against data already collected by SecurityCenter. You can have results in seconds, and if any vulnerable systems are identified, you can notify the appropriate system administrators in minutes. Weekend saved!

SecurityCenter’s dynamic asset lists let you slice and dice your assets as you need to automate much of your security and compliance program. To learn more about them, plan to attend our upcoming webcast on Four Ways You Can Make Vulnerability Management More Efficient and Effective.

Related Articles

Cybersecurity News You Can Use

Enter your email and never miss timely alerts and security guidance from the experts at Tenable.

Tenable Vulnerability Management

Formerly Tenable.io

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Formerly Tenable.io

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Tenable Vulnerability Management

Formerly Tenable.io

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Formerly Tenable.io

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Tenable Vulnerability Management

Formerly Tenable.io

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Formerly Tenable.io

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Try Tenable Web App Scanning

Formerly Tenable.io Web Application Scanning

Enjoy full access to our latest web application scanning offering designed for modern applications as part of the Tenable One Exposure Management platform. Safely scan your entire online portfolio for vulnerabilities with a high degree of accuracy without heavy manual effort or disruption to critical web applications. Sign up now.

Your Tenable Web App Scanning trial also includes Tenable Vulnerability Management and Tenable Lumin.

Buy Tenable Web App Scanning

Formerly Tenable.io Web Application Scanning

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

5 FQDNs

$3,578

Buy Now

Try Tenable Lumin

Visualize and explore your exposure management, track risk reduction over time and benchmark against your peers with Tenable Lumin.

Your Tenable Lumin trial also includes Tenable Vulnerability Management and Tenable Web App Scanning.

Buy Tenable Lumin

Contact a Sales Representative to see how Tenable Lumin can help you gain insight across your entire organization and manage cyber risk.

Try Tenable Nessus Professional Free

FREE FOR 7 DAYS

Tenable Nessus is the most comprehensive vulnerability scanner on the market today.

NEW - Tenable Nessus Expert
Now Available

Nessus Expert adds even more features, including external attack surface scanning, and the ability to add domains and scan cloud infrastructure. Click here to Try Nessus Expert.

Fill out the form below to continue with a Nessus Pro Trial.

Buy Tenable Nessus Professional

Tenable Nessus is the most comprehensive vulnerability scanner on the market today. Tenable Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy a multi-year license and save. Add Advanced Support for access to phone, community and chat support 24 hours a day, 365 days a year.

Select Your License

Buy a multi-year license and save.

Add Support and Training

Try Tenable Nessus Expert Free

FREE FOR 7 DAYS

Built for the modern attack surface, Nessus Expert enables you to see more and protect your organization from vulnerabilities from IT to the cloud.

Already have Tenable Nessus Professional?
Upgrade to Nessus Expert free for 7 days.

Buy Tenable Nessus Expert

Built for the modern attack surface, Nessus Expert enables you to see more and protect your organization from vulnerabilities from IT to the cloud.

Select Your License

Buy a multi-year license and save more.

Add Support and Training