Set up Tenable Security Center for Integration
Focus
Focus
Device Security

Set up Tenable Security Center for Integration

Table of Contents

Set up Tenable Security Center for Integration

Configure Tenable Security Center user accounts and API keys to enable integration with Device Security through Cortex XSOAR.
Where Can I Use This?What Do I Need?
  • Device Security (Managed by Strata Cloud Manager)
  • (Legacy) IoT Security (Standalone portal)
One of the following subscriptions:
  • Device Security subscription for an advanced Device Security product (Enterprise Plus, Industrial OT, or Medical)
  • Device Security X subscription
One of the following Cortex XSOAR setups:
  • A free, cohosted, limited-featured Cortex XSOAR instance
    AND
    A Cortex XSOAR Engine (on-premises integration)
  • A full-featured Cortex XSOAR server
It's assumed that you have already installed Tenable Security Center and a Tenable Nessus scanner on your network, and associated the scanner with your Tenable Security Center account. When integrating Tenable Security Center with Device Security and Cortex XSOAR, you need to provide Cortex XSOAR with API access to Tenable Security Center.
From your established Tenable Security Center management interface, enable API key authentication, and then generate API keys for the user account for Cortex XSOAR.
  1. Create a Tenable Security Center user account for Cortex XSOAR, and set the account's user role to Security Manager.
    When you test the connection from Cortex XSOAR to Tenable Security Center later, the test checks that the account has the Security Manager user role.
  2. Enable API key authentication for the user account for Cortex XSOAR.
    Before generating API keys, enable API key authentication so that the user account can perform API key authentication.
  3. Generate API keys for the user account for Cortex XSOAR.
    After you generate the API keys, the two API keys appear in the pop-up:
    • Access Key: Use this key to authenticate Cortex XSOAR and Tenable Security Center to each other, so that Cortex XSOAR can access Tenable Security Center resources.
    • Secret Key: This key encrypts and decrypts communications between Tenable Security Center and Cortex XSOAR.
    Copy and store the API keys in a secure location, as they can't be displayed again. You need both the access key and the secret key to configure Cortex XSOAR to perform API authentication with Tenable Security Center. If you lose either key, you need to generate a new set of API keys.