Tenable Security Center

Tenable Security Center and Tenable Security Center is Tenable Plus local vulnerability management solutions.Tenable Security Center系列产品以业界领先的 Nessus 技术为基础，可用于识别、研究漏洞并对漏洞进行优先级分析，提供基于风险的安全和合规态势视图。有关这些解决方案的更多信息，请参阅Tenable Security Center product informationandTenable Security Center Plus product information.

Tenable Security Center Plus is a combination of the Tenable Security Center function based on vulnerability management platform, including the Tenable Lumin risk index of the network, loopholes for your assets and provides an extra layer of context.These indicators for your vulnerability management plan provides an easier to customize method, all the indicators are based on your Tenable Security Center Plus calculation, so keep your data in the local.In addition, the Tenable Security Center can Plus and management platform of Tenable exposure Tenable One integration, improved the Security Center Plus provides insight into the value.

Of course!Tenable Security Center Plus and Tenable One mixed holes are provided for the integration management and deployment, support local customers make full use of the risk management platform.

Tenable One exposure is a management platform, can help enterprises to get the entire modern attack the visibility, focus on the prevention of possible attacks, and accurately convey the network security risk, and to support the enterprises to achieve the best performance.The platform is a combination of IT assets, cloud resources, containers, Web applications and identity system is the most extensive coverage, to Tenable hole cover rate and width of the Research as the foundation, and add the function of comprehensive analysis, with an analysis of the priority actions and communicate network security risk.Tenable One can make enterprises implement the following functions:

• Get the entire modern attack the full visibility
• Predicting threat to attack prevention priority analysis
• Network security risk in order to make better decisions

Tenable Security Center Director is Tenable Security Center of add-ons.It provides enterprise customers across multiple Tenable Security Center usually scattered unified view of large networks.Tenable Security Center Director提供对您的实例的完整可见性和管理功能，因此您可以专注于漏洞管理并减少管理任务所需的开销。

Forecast data collected a loophole in the priority analysis will be Tenable combined with a third party of vulnerability and threat data, and USES the Tenable Research, Research and development of advanced large algorithm based on the data analysis as a whole.Every hole for a bug priority rating (VPR), said the ratings attacker within 28 days in the future the possibility of using a given hole and its severity.You can use the VPR understand unique environment vulnerability of actual network security risks, the greatest vulnerability to impact so that you can be the priority for repair work.

For more information, please checkCommon problemsOr visitWeb page.

Tenable Security Center using a variety of sensors to ensure real-time continuous discovery and evaluate your network, assets and loopholes.

Tenable Security Center used the safety of the enterprise data collected, such as the following sources:

• Passive monitoring:Real-time monitoring network traffic and events, that part of the assets and the Internet connection and communication of information.It can identify new or never find equipment or application, and to detect suspicious behavior occurs.
• Active scanning:Comprehensive analysis of the state assets, in order to identify vulnerabilities, misconfiguration, malware and other weak links.
• The host data:Initiative to monitor host activities and events, including access and change the insight.
• Smart connector:By making full use of your other Security investment, Tenable Security Center can integrate other safety data, so as to improve the context and analysis ability.Both the analysis of various sources of information provided, including the active directory (AD), the configuration management database (CMDB), patch management system, mobile device management (MDM) system, cloud platform, etc.
• Proxy scanner:Real-time audit no credentials, temporary or intermittent connection to the Internet is difficult to scan.After the installation is complete, authorized agent can run scan, and without the need for constant host credentials.

The Nessus AgentsCan be locally installed on the host (notebook computer, virtual system, desktop computers and/or server) on the lightweight application.The Nessus Agents能够接收来自中央 Nessus Manager 服务器的扫描指令并在本地执行扫描，将漏洞、合规性与系统扫描结果上报给中央服务器。Nessus Agents 随Tenable Vulnerability Management,And Tenable Security Center.

Nessus Agents and Tenable Security Center combined can easily scan problematic assets, such as always need host credentials and offline assets, increase the scanning coverage and eliminate the blind spot.Nessus Agents also implements a limited impact on the network of large scale scanning at the same time.

If you would like to know the Nessus Agents more related information, please refer to the following resources:

• The Nessus Agents common problems
• The Nessus Agents web page
• The Nessus Agents, the white paper

Tenable ResearchProvide support for Tenable Security Center, delivering world-class network threat intelligence, big data insight and Security bulletins.Tenable拥有业界最广泛的漏洞和情报数据集之一，其 CVE 覆盖率最高，自 2019 年 1 月以来，披露了超过 77,000 个 CVE 和超过 460 个零日漏洞。Tenable 每天更新漏洞数据库，以囊括新出现漏洞。Tenable Research 每周提供超过 100 种新检测。

Detected in Tenable Security Center holes, it will provide detailed insight into each vulnerability detected, including:

• Vulnerability information:Vulnerability names and descriptions, repair guide, found that the date and the last observed date, CPE, patch release dates, the vulnerability of the state of patches, plug-in ID and detailed information
• Host information:Host name, the affected host, IP address, DNS, Mac address, NetBIOS, repository
• Risk information:Vulnerability severity score, VPR, CVSS scores and attack vectors, loopholes exist history, known and the exploit method, and the exploit code maturity, product coverage, source of strength, the latest threat, threat, the percentage of risk reduction associated with patches

Tenable Security Center to provide extremely flexible reporting functions, using more than 350 reports of pre-built templates and user friendly to create interface function easily create custom reports.Based on the HTML report data integration of the whole enterprise, so you can measure and analyze the effectiveness of safety measures.You can to an existing template as a starting point, by removing or adding specific components or adjust the filter to the custom data fully, development report of satisfying different needs.

You can also develop a variety of reports, each report is custom, in order to provide different views of the collected data, thus corresponding to the enterprise team or decision makers provide rich information report in a timely manner.Report can range in details as the guidance, also can be the height of the summary.Report in a standard PDF and CSV format.When you're done, you can plan and automatically sent via email report and share to one or more specified console user and/or issued to one or more sites.

You can also use the Tenable Security Center comprehensive, automatically report your network is in line with the complex standard, for examplePCIPCI andNIST.

Is.Tenable Security Center can help maintain compliance?With the help of it, you can immediately to have visibility to the compliance situation, always maintain compliance status.You can according to industry standards and regulatory requirements (such as ISO/IEC 27001/27002,PCI,NIST network security framework,NIST SP. 800-171andCIS Critical Controls,Prove that conform to the predefined check easily.

Tenable Security Center for industry leading Security standards and compliance requirements provide out-of-the-box, fully customizable report and dashboard you can use them "as is", can also be easily customized to meet your specific Security and business requirements.For example, you can easily create specific for each business line report and dashboard.

The external attack surface managementIs a function provided by Tenable, can provide network around outside the visibility of blind spots.The function to support customer to scan of its domain, to find may be risky for your enterprise assets, previously unknown, and connected to the Internet.

Is that,The external attack surface managementFunction with the Tenable Security Center.If you need additional domains in the scan results, frequency and/or metadata, you can buy our Tenable Attack Surface Management add-ons.

Is.Tenable Security Center integrated with other products.The suite provided with the single, patch management, SIEM, SOAR execution and other third-party product out-of-the-box integration, this can be Tenable loopholes insight into value into full play.accessTechnology of ecological systemPage, learn more about the integration of available functions and ecological system partners.You can also use the Tenable Security CenterAPIDevelop a custom integration.

In addition, the Tenable Security Center also provides with Tenable Lumin and Tenable OT Security built-in integration.Tenable Security Center Plus与 Tenable One 集成，提供混合漏洞管理部署，让本地客户可以利用风险暴露管理平台。

Tenable Security Center according to the annual subscription is licensed and according to the IP pricing.Also offers a permanent license.

Tenable Security technical documentation is located in the Center and all Tenable product:https://docs.tenable.com/.