- 16 Mar 2023
- 3 Minutes to read
-
Print
-
DarkLight
-
PDF
Tenable.io - Add IP Addresses to Target Group
- Updated on 16 Mar 2023
- 3 Minutes to read
-
Print
-
DarkLight
-
PDF
Tenable.io - Add IP Addresses to Target Group (Tenable.io - Add IP Addressess to Target Group) adds IP addresses to an existing Tenable.io target group or creates a new Tenable.io target group.
Tenable.io target groups allow you to set permissions for which hosts users can scan. By default, all users can scan all hosts.
For more details about Tenable.io target groups, see Tenable.io online documentation.
See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.
General Settings
- Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonious. You can change the name according to your needs.
- Add description (optional) - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
- Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
- A query only returns results for the asset type it was created for.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs and Adapter Fetch History Modules
- Action name - The name of the Main action. A default value is added by Axonious. You can change the name according to your needs.
- Configure Action Conditions - Toggle on to enter a condition statement. See Configuring Enforcement Action Conditions to learn more about condition statement syntax.
Connection Settings
- Use stored credentials from the Tenable.io Adapter (required, default: True) - Select this option to use the the first connected Tenable.io adapter credentials.
- Tenable.io domain (optional, default: empty) - The IP address or hostname of your Tenable.io management server.
If Use stored credentials from the Tenable.io Adapter is disabled, this field is required.
- Access API key and Secret API key (required) - These values must be created in the Tenable.io console. To generate an API key in the Tenable.io console, see Tenable.io - Generate an API Key.
If Use stored credentials from the Tenable.sc Adapter is disabled, this field is required.
- Verify SSL (required, default: False) - Verify the SSL certificate offered by the host supplied in Tenable.io Domain. For more details, see SSL Trust & CA Settings.
- If enabled, the SSL certificate offered by the host will be verified against the CA database inside of Axonius. If it fails validation, the connection will fail with an error.
- If disabled, the SSL certificate offered by the host will not be verified against the CA database inside of Axonius.
- HTTPS proxy (optional, default: empty) - A proxy to use when connecting to Tenable.io Domain.
- If supplied, Axonius will utilize the proxy when connecting to the host defined for this connection.
- If not supplied, Axonius will connect directly to the host defined for this connection.
Action Settings
- Target group name (required, default: empty) - Specify the Tenable.io target group name to be updated/created.
- Create new target group (required, default: False) - Select whether to create a new target group in Tenable.io.
- If enabled, Axonius will create a new target group in Tenable.io.
- If disabled, Axonius will update the specified target group name in Tenable.io.
- Use private IP addresses (required, default: True) - Select whether to add private IP addresses to Tenable.io.
- If enabled, Axonius will add private IP addresses to Tenable.io.
- If disabled, Axonius will not add private IP addresses to Tenable.io.
- Use public IP addresses (required, default: True) - Select whether to add public IP addresses to Tenable.io.
- If enabled, Axonius will add public IP addresses to Tenable.io.
- If disabled, Axonius will not add public IP addresses to Tenable.io.
- Exclude IPv6 addresses (required, default: False) - Select whether to add IPv6 addresses to the Tenable.io target group.
- If enabled, Axonius will add only IPv4 addresses to Tenable.io.
- If disabled, Axonius will add both IPv4 and IPv6 addresses to Tenable.io.
- Override current IP address list (required, default: False) - Select whether to override the current Tenable.io target group IP list.
- If enabled, Axonius will override the current Tenable.io target group IP list.
- If disabled, Axonius will add IP addresses to the existing Tenable.io target group IP list.
- CIDR exclude list (optional, default: empty) - Specify a comma-separated list of CIDRs to be excluded.
- If supplied, Axonius will not add to Tenable.io IP addresses in the IP range of the specified CIDRs.
- If not supplied Axonius will add to Tenable.io IP addresses in any IP range.
For more details about other Enforcement Actions available, see Action Library.