Tenable.io - Add IP Addresses to Scan
- 16 Mar 2023
- 3 Minutes to read
-
Print
-
DarkLight
-
PDF
Tenable.io - Add IP Addresses to Scan
- Updated on 16 Mar 2023
- 3 Minutes to read
-
Print
-
DarkLight
-
PDF
Tenable.io - Add IP Addresses to Scan (Add IPs to Tenable.io Scan) add the IP addresses that are the result of the saved query supplied as a trigger (or devices that were selected in the asset table), and adds them to an existing Tenable.io scan.
See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.
General Settings
- Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonious. You can change the name according to your needs.
- Add description (optional) - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
- Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
- A query only returns results for the asset type it was created for.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs and Adapter Fetch History Modules
- Action name - The name of the Main action. A default value is added by Axonious. You can change the name according to your needs.
- Configure Action Conditions - Toggle on to enter a condition statement. See Configuring Enforcement Action Conditions to learn more about condition statement syntax.
Connection Settings
- Use stored credentials from the Tenable.io Adapter (required, default: True) - Select this option to use the the first connected Tenable.io adapter credentials.
NOTE
To use this option, you must successfully configure a Tenable.io adapter connection.
- Tenable.io domain (optional, default: empty) - The IP address or hostname of your Tenable.io management server.
NOTE
If Use stored credentials from the Tenable.io Adapter is disabled, this field is required.
- Access API key and Secret API key (required) - These values must be created in the Tenable.io console. To generate an API key in the Tenable.io console, see Tenable.io - Generate an API Key.
NOTE
If Use stored credentials from the Tenable.sc Adapter is disabled, this field is required.
- Verify SSL (required, default: False) - Verify the SSL certificate offered by the host supplied in Tenable.io Domain. For more details, see SSL Trust & CA Settings.
- If enabled, the SSL certificate offered by the host will be verified against the CA database inside of Axonius. If it fails validation, the connection will fail with an error.
- If disabled, the SSL certificate offered by the host will not be verified against the CA database inside of Axonius.
- HTTPS proxy (optional, default: empty) - A proxy to use when connecting to Tenable.io Domain.
- If supplied, Axonius will utilize the proxy when connecting to the host defined for this connection.
- If not supplied, Axonius will connect directly to the host defined for this connection.
Action Settings
- Scan name (required, default: empty) - Specify the Tenable.io scan name to be updated.
- Use public IP addresses (required, default: True) - Select whether to add public IP addresses to Tenable.io.
- If enabled, Axonius will add public IP addresses to Tenable.io.
- If disabled, Axonius will not add public IP addresses to Tenable.io.
- Use private IP addresses (required, default: True) - Select whether to add private IP addresses to Tenable.io.
- If enabled, Axonius will add private IP addresses to Tenable.io.
- If disabled, Axonius will not add private IP addresses to Tenable.io.
- Exclude IPv6 addresses (required, default: False) - Select whether to add IPv6 addresses to the Tenable.io scan.
- If enabled, Axonius will add only IPv4 addresses to Tenable.io.
- If disabled, Axonius will add both IPv4 and IPv6 addresses to Tenable.io.
- CIDR exclude list (optional, default: empty) - Specify a comma-separated list of CIDRs to be excluded.
- If supplied, Axonius will not add to Tenable.io IP addresses in the IP range of the specified CIDRs.
- If not supplied Axonius will add to Tenable.io IP addresses in any IP range.
For more details about other Enforcement Actions available, see Action Library.