Kenna Security Platform

Kenna Security Platform is a vulnerability assessment solution that provides risk scoring, prioritization, and benchmarking.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices

Parameters

1. Kenna Security Platform URL (required, default: https://api.kennasecurity.com) - The URL for the Kenna Security Platform admin panel.
2. API Token (required) – Specify your account API key or an API token you have created.
3. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Kenna Security Platform URL. For more details, see SSL Trust & CA Settings.
   • If enabled, the SSL certificate offered by the value supplied in Kenna Security Platform URL will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
   • If disabled, the SSL certificate offered by the value supplied in Kenna Security Platform URL will not be verified against the CA database inside of Axonius.
4. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Kenna Security Platform URL.
   • If supplied, Axonius will utilize the proxy when connecting to the value supplied in Kenna Security Platform URL.
   • If not supplied, Axonius will connect directly to the value supplied in Kenna Security Platform URL.
5. To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.
   
   

Advanced Settings

1. Use export API (required, default: False) - Select whether to use the data_export endpoint.
   • If enabled, all connections for this adapter will fetch data from the data_export endpoint. This setting to be enabled to fetch more than 10k assets.
   • If disabled, all connections for this adapter will fetch data from the assets, vulnerabilities and fixes endpoints. Those endpoints are limited to 10k assets (results).
2. Fetch device vulnerabilities and fixes - Select whether to fetch vulnerability and fixes information for devices, otherwise only device information is fetched.

APIs

Axonius uses the Kenna Security Platform API.

You may locate and change your API token by logging in and clicking your company's name in the upper right hand corner. In the dropdown that appears, chose 'API Keys'. Your API token will be listed first in the table found on the applications page. You would replace in the example below with your API token.

Required Ports

Axonius must be able to communicate with the value supplied in API Token via the following ports: 443 (HTTPS).