Unlimited Discovery Scanning with SecurityCenter and Nessus
Note: Tenable SecurityCenter is now Tenable.sc. To learn more about this application and its latest capabilities, visit the Tenable.sc web page.
With the recent release of SecurityCenter 4.0.1, Tenable has modified the IP-based licensing to include unlimited discovery scanning. This means organizations that make use of SecurityCenter can perform routine ping sweeps of their backbones and network blocks without it counting against their licensed IPs.
SecurityCenter is licensed solely based on the number of active hosts with vulnerabilities on your network. You may have several class C networks (255 potential hosts each), but SecurityCenter licensing only counts against the number of active hosts. Tenable does not need to know your IP ranges or provide keys for hosts or networks you may have not known about before you deployed SecurityCenter.
With the new licensing, organizations can schedule ping sweeps of their network to look for new hosts on a routine basis. If you have a large network and multiple Nessus scanners, SecurityCenter will automatically split the scan across the scanners until the ping sweep is complete. When routine ping sweeps are fed into SecurityCenter, scan results can automatically be used for:
- Creating dashboard trending elements to count the number of hosts not being targeted for regular vulnerability auditing
- Creating alerts when new hosts are discovered in networks where there should not be any new hosts
- Creating alerts when the number of hosts drops below an expected value, which could indicate a network outage or connectivity issue with the host
Organizations interested in discovery of new hosts should also consider the Passive Vulnerability Scanner (PVS). This Tenable product looks at network traffic and discovers new hosts, new applications and their vulnerabilities by inspecting packet and session content. It identifies any host on your network that communicates, regardless of response to ping requests by Nessus.
Organizations that make use of SecurityCenter’s unlimited discovery scans and find additional hosts they wish to include need to contact Tenable’s sales team to request an upgrade key. Newer keys means that full vulnerability scans, patch audits and configuration audits can be performed on the discovered hosts. More than one third of all Tenable SecurityCenter customers procure an upgrade key to expand the number of IP addresses they perform scanning for within their first year of operation.
Related Articles
Unified IT and Web App Security: On-Prem Web App Scanning Integrated into Security Center
October 17, 2023On-prem web app scanning is now available within Tenable Security Center, offering comprehensive exposure management with accurate analysis, OWASP Top 10 coverage and easy setup. Here’s what you need to know.
What Is VPR and How Is It Different from CVSS?
April 16, 2020This blog series will provide an in-depth discussion of vulnerability priority rating (VPR) from a number of different perspectives. Part one will focus on the distinguishing characteristics of VPR th...
Tenable Releases SecurityCenter Continuous View
August 9, 2012<p>Today, Tenable <a href="http://www.tenable.com/news-events/press-releases/2012-tenable-network-security-unveils-securitycenter-continuous-view" target="_self" title="Tenable Network Security Unveils SecurityCenter Continuous View">announced </a>the availability of a new edition of SecurityCenter, called Continuous View.</p> <p>This edition of SecurityCenter uniquely encompasses both scanning and monitoring, with the inclusion of Tenable's Passive Vulnerability Scanner (PVS). That makes SecurityCenter Continuous View uniquely capable of addressing vulnerability, configuration, and compliance management requirements for emerging technologies like mobile devices, cloud-based services, social applications, and virtual systems.</p> <p>The flexible licensing approach provided by SecurityCenter Continuous View allows enterprise customers to deploy PVS in much the same way as they do with Nessus within SecurityCenter, pretty much as many as needed.</p> <p>Existing SecurityCenter customers can upgrade to a ContinuousView license and begin to enjoy the benefits of continuous monitoring with PVS. These include:</p> <ul> <li>Real-time identification of server and client vulnerabilities </li> <li>Identification of mobile devices and their vulnerabilities </li> <li>Passive discovery of all internal and external web servers and databases </li> <li>Identification of trust and communication paths </li> <li>Passive monitoring of virtual environments </li> </ul>
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- SecurityCenter