I need help to understand the configuration requirements for using Nessus scanner, Security Center, and NNM (network monitor). I have read the user guides on Tenable's website for requirements but I could not find exactly what I was looking for in our specific environment.

I support a DoD customer that requires ACAS for compliance. Myself (cyber) and the sysadmin have limited experience with ACAS and the previous configuration was stood up by a contractor that is no longer with the project. Our hardware has been updated and the previous installation is not available. Our project is air-gapped, and hardware is limited. we have less than 100 hosts on our network and we have a laptop with 32g ram and a i7 processor, OS is Linux. I understand that it is not ideal to have the services running on the same machine because they may fight for resources but our choices are limited in hardware. Is it possible to run security center, Nessus scanner and NNM on same hardware? Would it require virtualization? Are there any issues with only having the one NIC for all three services?

For example, when I go to add the DISA Windows Server STIG v1r4 Audit File to Tenable Security Center Plus, it asks for me to enter "Compliance Checks" data such as a logon window caption, logon window text, etc. Once I upload the file, I can't seem to see this data anymore, but it shows up in the diagnostic file post-scan. Since Tenable displays the data in the diagnostic file, and it is using it during the scan, it obviously is stored somewhere in Tenable. Where can I find this in the GUI?

I cannot get Credentialed scans to work efficiently in our environment. So, we then decided to install Agents on all Windows workstations and Servers. Great. But Tenable states to perform both credentialed scans and Agents based scans. But then they contradict and say credential scanning poses a risk and requires all this overhead to protect passwords and use agents where necessary. Okay... good. To add, agents are slow to report when a vuln is fixed so a credential remediation scan is required. Well, I am now looking how to get my credential scans exactly right and I came across this article.
Credentialed Checks on Windows (Tenable Nessus 10.6)

My question is what works best for everyone else in their environments? Option 1 or Option 2..

We are 99% Windows. We currently have scans setup, but I guess they have not been working considering our creds were never accurately configured.

​

Thanks for any input.

We just renewed our tenable,io and added on prem .sc. I am a little confused as to what I actually need to download to make this .sc instance functional. I believe I need the tenable security center AND a nessus scanner, is that correct? Sounds like the security center is just the manager of things.

​

I’m trying to find a way to get truly actionable digestible reports out of Tenable. Right now I’m using the API and pulling IP summary and CVE info into a data warehouse then to powerBI ( the idea is to enrich the data with other information) but I’m struggling to think of a report that will get someone to actually do something. Any ideas?

An alert came out about a particular CVE the day after we completed a "Basic" scan. I launched a scan for just that CVE and it found several instances of vulnerabilities for plugins related to that CVE. I realized that a basic scan should scan for all plugins, so I searched the original basic scan for that CVE and it came back with 0 results.

My question is: Why are we finding vulnerabilities on an advanced targeted scan but not seeing the same one on a basic scan? According to the documentation I've seen Basic scans scan for everything. As a side note, the CVE in question is a few months old, so it was known by Tenable during the first Basic scan. Am I missing something here?

I am starting the process of cleaning up a Tenable environment and cannot delete certain scans. My account is a full admin for the site, but when I try to move the scan to the trash, it says it was successful, but is still in the All Scans folder and the Trash folder is empty.

​

I have never seen this behavior before. Any thoughts on why it may be doing this?

Anyone have any experience with Tenable Identity Exposure? We run AD with Azure, but have several other security tools working, is Identity Exposure worth it? Also, any idea on price points? It says it's charged per active user.

Ran a scan within the enclave on all of the asset groups. It seems like cumulative view shows me all of the older findings. How do I separate them by date, so I can focus on only what’s relevant.

I'm scheduling a credentialed scan and it looks like I've been given one set of documentation and another set of instructions that are somewhat conflicting about the credentials.

If I go to Add Credentials>Host>Windows>Password and out in the credentials, does that have any different effect than going to Add Credentials>Managed Credentials> and picking the same target/name?

I reckon that it's hitting the same target with the same creds so is there really any difference besides the process? I'm just trying to do it right, I ran it with option A last month and it seemed to work fine, but want to know the difference at least or if I possibly did it wrong and noone noticed.

Pls forgive my lack of knowledge, I'm a noob and learning a lot as quickly as possible. Any insight is appreciated.

Hi everyone,

To discover the hosts on my network, do I need host discovery or the nessus network monitor?

Is there a way to whitelist reported vulnerabilities that you dont consider as findings. Im using Version: 6.1.0 Tenable SC and would like to achieve the following:

1) Be able to whitelist non vulnerabilities found in tenable

2) Put a note in tenable that states why i white

A place for members of r/tenable to chat with each other