The following Guide details steps to get an API connection between Expel's Workbench and the Tenable Vulnerability Management (VM) platform.
Getting API credentials from Tenable VM
Adding API credentials to Workbench
Getting API credentials from Tenable VM
-
Open Tenable.
From the menu in the upper left, click Settings.
-
Click Access Control.
-
Click Create User.
-
Create an Admin user.
Note
This user is for API access, the account must be tied to your domain, so you should use something like soc+admin@yourdomain.com or soc+api@yourdomain.com.
Login with the account that was just created.
-
In addition to the API user, create an Admin user account for console access and provide the credential to Expel, who will finish setting up the 2FA - this account should be using 2FA with either TOTP authentication or using a SOC hotline.
Note
The user must come from your domain, so please name the user something like soc+console@yourdomain. If Tenable has configured it, you can use the @expel.io as the email.
-
From the menu in the upper left, click Settings.
-
Click My Account.
-
Click API KEYS.
-
Click Generate.
Copy the Access Key and the Secret Key. These will be used in connecting the device to Workbench.
Adding API credentials to Workbench
The following details how to add Tenable to Workbench:
In the menu on the left, click Organization Setting.
Click Security Devices.
In the top right, click +Add Security Device.
-
Search for Tenable VM.
Note
If you do not see the Tenable VM Scanner in Workbench as an integration, then an Expel Customer Support Engineer will have to set the connection to Workbench using the API information provided by the client.
-
Within Edit Security Device insert:
Name: Name of device
Location: Where the device lives
Access Key: Key that was generated in Step 4
Secret: Secret that was generated in Step 4
Console URL: insert https://cloud.tenable.com.
Username: Username that was set up in Step 4
Password: