Tenable Vulnerability Management - Create Exclusion

Tenable Vulnerability Management - Create Exclusion creates an exclusion in Tenable Vulnerability Management for:

• Assets returned by the selected query or assets selected on the relevant asset page.

See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

When accessing an enforcement action using the API, you must use the backend form of field names.

Use the Syntax Helper to find the correct name. In the enforcement action, enable Configure Dynamic Values and select Syntax Helper.

📘

Note

• Not all asset types are supported for all Enforcement Actions.
• See Actions supported for Activity Logs, Adapters Fetch History, and Asset Investigation modules.
• See Actions supported for Aggregated Security Findings.
• See Actions supported for Software.

Required Fields

These fields must be configured to run the Enforcement Action.

• Use stored credentials from the Tenable Vulnerability Management adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.

  • When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.

    📘

    Note

    To use this option, you must successfully configure a Tenable Vulnerability Management adapter connection.

• Exclusion Name - The name of the exclusion to create in Tenable Vulnerability Management.

• Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Working with Axonius Compute Nodes.

Additional Fields

These fields are optional.

• Description - An optional description for the exclusion.
• Use public IP addresses - Include public IP addresses from Axonius assets in the exclusion members list.
• Use private IP addresses - Include private IP addresses from Axonius assets in the exclusion members list.
• Add Hostnames - Include hostnames from Axonius assets in the exclusion members list.
• Exclude IPv6 addresses - When enabled, excludes IPv6 addresses and only includes IPv4 addresses.
• CIDRs exclude list - A comma-separated list of CIDR blocks to exclude from the exclusion members list.

APIs

Axonius uses the Tenable Vulnerability Management API - POST /exclusions

Required Ports

Axonius must be able to communicate via the following ports:

• TCP port 443

Required Permissions

The following permissions and requirements are needed:

• A Tenable Vulnerability Management account with a minimum of Basic User [16] permission level.
• Scan Manager [40] or Administrator [64] permission level is recommended.