New in SecurityCenter 5.5.2
Note: Tenable SecurityCenter is now Tenable.sc. To learn more about this application and its latest capabilities, visit the Tenable.sc web page.
We are pleased to announce the release of SecurityCenter® 5.5.2, which will deliver a number of exciting new capabilities. Here are some highlights:
Support for Multiple LDAP Servers
SecurityCenter 5.5.2 introduces Multi-LDAP support, allowing users to use multiple LDAP servers to authorize SecurityCenter users. This new feature removes operational overhead and administrative challenges associated with authenticating SecurityCenter users, and allows compliance with local security policies.
Support for Multiple LDAP Query Assets
Once set up, customers will also be able to utilize multiple LDAP servers in their asset lists for vulnerability scanning, dashboards, reports and other areas of the product.
Setup
If you’re currently using an LDAP server in SecurityCenter, no additional work is required. Migration will occur automatically upon upgrade and there will be no service disruption.
To set up an LDAP server in SecurityCenter for the first time, or to add additional LDAP servers, navigate to Resources > LDAP Servers.
From here, you can set up multiple LDAPs and associate them with organizations, giving those organizations access to that LDAP server. After that, it’s as easy as editing a user to point them to a specific LDAP to use when logging in to SecurityCenter. For more detailed instructions, review the documentation at docs.tenable.com.
Once set up, users can create LDAP Query Assets to use in asset lists. Note that a user can't add an LDAP server to an asset list unless that LDAP is associated with their organization.
More Information
- If you’re a current user and want to learn more, log in to the Tenable Support Portal to review the SecurityCenter 5.5.2 release notes. Or review the official documentation at the Tenable Documentation Center.
- Information about SecurityCenter, including whitepapers and videos, is available on our website.
- If you’d like to see a demo or speak with a Tenable™ sales representative, please request a demo.
Related Articles
Unified IT and Web App Security: On-Prem Web App Scanning Integrated into Security Center
October 17, 2023On-prem web app scanning is now available within Tenable Security Center, offering comprehensive exposure management with accurate analysis, OWASP Top 10 coverage and easy setup. Here’s what you need to know.
What Is VPR and How Is It Different from CVSS?
April 16, 2020This blog series will provide an in-depth discussion of vulnerability priority rating (VPR) from a number of different perspectives. Part one will focus on the distinguishing characteristics of VPR th...
Tenable Releases SecurityCenter Continuous View
August 9, 2012<p>Today, Tenable <a href="http://www.tenable.com/news-events/press-releases/2012-tenable-network-security-unveils-securitycenter-continuous-view" target="_self" title="Tenable Network Security Unveils SecurityCenter Continuous View">announced </a>the availability of a new edition of SecurityCenter, called Continuous View.</p> <p>This edition of SecurityCenter uniquely encompasses both scanning and monitoring, with the inclusion of Tenable's Passive Vulnerability Scanner (PVS). That makes SecurityCenter Continuous View uniquely capable of addressing vulnerability, configuration, and compliance management requirements for emerging technologies like mobile devices, cloud-based services, social applications, and virtual systems.</p> <p>The flexible licensing approach provided by SecurityCenter Continuous View allows enterprise customers to deploy PVS in much the same way as they do with Nessus within SecurityCenter, pretty much as many as needed.</p> <p>Existing SecurityCenter customers can upgrade to a ContinuousView license and begin to enjoy the benefits of continuous monitoring with PVS. These include:</p> <ul> <li>Real-time identification of server and client vulnerabilities </li> <li>Identification of mobile devices and their vulnerabilities </li> <li>Passive discovery of all internal and external web servers and databases </li> <li>Identification of trust and communication paths </li> <li>Passive monitoring of virtual environments </li> </ul>
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- SecurityCenter