Introducing SOC Insights for BloxOne Threat Defense: Boost your SOC efficiency with AI-driven insights to eliminate manual work and accelerate investigation and response times. Read the blog announcement here.

Tenable

Reply
This is an open group. Sign in and click the "Join Group" button to become a group member and start posting.
INFOBLOX & TENABLE.IO INTEGRATION TEMPLATES AND DEPLOYMENT GUIDE
[ Edited ]
Moderator
Posts: 84
Registered: ‎06-21-2017
Moderator
Moderator
Posts: 69

Hello,

 

Infoblox and Tenable.io together help empower actionable insight into your entire infrastructure’s security risks, allowing for you to quickly and accurately identify, investigate, and prioritize vulnerabilities and misconfigurations in your modern IT environment.

 

Infoblox provides Tenable.io with resources such as IP addresses, Hosts, and potential threats and in exchange Tenable.io gets improved management on assets and the ability to automatically trigger scans when security events occur. The integration with Infoblox and Tenable.io allows for quicker remediation and more insight into the entire network.

 

In the attached documents you will find the templates for the Tenable.io integration in txt format. The templates are provided “as-is” and should be tested in your lab environment and modified as needed before implementing them into production.

 

The templates require extensible attributes described in the table below. It is recommended to inherit attributes with the default values from the network view level.

 

Extensible Attributes

Description

Type

TNBL_IO_Add_by_Hostname

Defines if a host should be synced with Tenable.io using a hostname. The hostname should be resolvable by Tenable.io.

List

(true, false)

TNBL_IO_Last_Scan

Contains a date when an asset was scanned last time by a request from Infoblox

String

TNBL_IO_Scan

Defines if an asset should be scanned if RPZ, ADP or DNS Tunneling events are triggered

List

(true, false)

TNBL_IO_Scan_On_Add

Defines if an asset should be scanned immediately after creation

List

(true, false)

TNBL_IO_Scan_Template

Defines a Tenable.io active scan which should be used for scans initiated by Infoblox. List of possible values should match active scan names on Tenable.io.

String

TNBL_IO_Sync

Defines if an object should be synced with Tenable.io.

List

(true, false)

TNBL_IO_Sync_Time

Contains date/time when the object was synchronized.

String

TNBL_IO_Target_Group

Defines a target group in Tenable.io that holds the assets to be scanned by Tenable.io.

String

Showing results for 
Search instead for 
Did you mean: