Tenable Scan Strategy Guide
Tenable Scan Strategy Tenable Professional Services
Last Revised: May 07, 2021
Table of Contents
Introduction
3
Network Assessment
4
Network Topology
5
Scan Target Identification
7
Customer Requirements
9
Tenable Resource Allocation
10
Scanning Methodology
11
Active Scan Schedule Options
12
Scan Policy Configuration
13
Host Discovery
14
Vulnerability Scan
16
External Vulnerability Scan
17
Compliance Checks
18
Scan Policy Settings
19
Related Documents
22
Copyright ? 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective
Introduction
The purpose of this document is to describe scan strategies that Tenable Professional Services Consultants recommend for their various customer environments. This document focuses on Tenable.io and Tenable.sc active scans that utilize Nessus.
Copyright ? 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.
-3-
Network Assessment
The scan strategy that Tenable? recommends depends on several factors: l Network Topology l Scan Target Identification l Customer Requirements l Tenable Resource Allocation
Copyright ? 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.
-4-
Network Topology
The organization's network topology determines Nessus scanner placement and Scan Zone configuration.
l Flat Network l The Nessus scanner(s) can directly access all targets without firewall or other network device configuration. l One or more scanners can be configured to scan network targets in a single Scanner Group/Scan Zone.
l Segmented Network l If a network is behind a firewall or is VLAN separated, such as a DMZ, the Nessus Scanner may not be able to successfully scan its target. l A Nessus Scanner should be placed in each network segment. l Nessus requires port TCP/443 to communicate with Tenable.io and TCP/8834 for Tenable.sc. l If a Nessus Scanner cannot be placed in the network segments, then firewall rules must be configured so the scanner can reach all intended target ports and protocols.
l Geographically Separated l To minimize network bandwidth utilization and potentially decrease scan duration, consider placing a Nessus Scanner at geographically separated sites.
l Operational Technology (OT) (e.g., ICS/SCADA, or other sensitive networks) l Nessus Network Monitor is highly recommended. l If Nessus Scanners are used, first test in a non-production environment.
l Combination of the previous examples
Scanner Groups (Tenable.io) / Scan Zones (Tenable.sc)
Example Scanner Groups/ Scan Zones:
Copyright ? 2021 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable,Inc. Tenable.sc, Tenable.ot, Lumin, Indegy, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.
-5-
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- fortisiem data sheet
- redes de computadores talktalk business
- linux kernel networking haifux haifa linux club
- overview core concepts and components
- trace32 installation guide lauterbach
- quectel eg25 g mini pcie
- multiple choice questions of computer networking
- tenable scan strategy guide
- introduction z os console commands for tcp ip cont
Related searches
- scan documents companies
- scan pdf to excel
- live scan fingerprinting near me
- free computer scan and repair from microsoft
- college paper plagiarism scan free
- scan a pdf into excel
- live scan fingerprinting services
- companies that scan documents
- good strategy bad strategy pdf
- good strategy bad strategy book
- bone scan for rsd
- mri scan with contrast