Browse Guides

Tenable Integration
Reading mode
Copy Link
Link Copied!
Print
Feedback
This guide has multiple versions available:
<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}img.fr-dib.fr-fir { margin-right: 0; text-align: right;}img.fr-dib.fr-fil { margin-left: 0; text-align: left;}img.fr-dib { margin: 5px auto; display: block; float: none;}img.fr-bordered { box-sizing: content-box; border: solid 5px #CCC;}img.fr-shadow { box-shadow: 10px 10px 5px 0px #cccccc;}img.fr-rounded { border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;}</style><p><span style="font-size: 14px;"><strong>In this guide we will cover:</strong></span></p><p><span style="font-size: 14px;"><strong>- What is the Tenable Integration?</strong></span></p><p><span style="font-size: 14px;"><strong>- Connecting to Tenable</strong></span></p><p><span style="font-size: 14px;"><strong>- Site Mappings</strong></span></p><p><span style="font-size: 14px;"><strong>- Asset Mappings</strong></span></p><p><span style="font-size: 14px;"><strong>- Miscellaneous Settings</strong></span></p><p><span style="font-size: 14px;"><strong>- Importing</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><br></p><p><span style="font-size: 14pt;"><strong>What is the Tenable Integration?<br></strong></span></p><p><span style="font-size: 14px;">The Tenable integration allows one way syncing of assets between Tenable and Halo. You can import assets from Tenable into Halo and have a scheduled sync run to update the asset information in Halo with details from Tenable.&nbsp;</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 18px;"><strong>Connecting to Tenable</strong></span></p><p><span style="font-size: 14px;">First, head to configuration &gt; integrations &gt; find Tenable and enable the module by selecting the &#39;+&#39; icon.</span></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImM5MTM3OWYyLWE1NmUtNGNhMC1iMmQwLTMyODdlNGY0ZWRmMCJ9.VRvn2hfhV-Z1OuoqMmPkFEcpzMC10P5NmFlz875ldOs" class="fr-fic fr-fil fr-dib" width="327" style="width: 329px; height: 160.531px;" height="161"></span></p><p><span style="font-size: 10pt;"><strong>Fig 1. Enable module</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">Once enabled, open the module and make a new connection.</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">Now we will need to generate the API keys needed to connect to Tenable. If you have generated these previously (for other integrations) you can use your existing keys, otherwise generate new ones. Head into Tenable &gt; my profile &gt; API Keys, on this page you can generate the API keys needed.</span></p><p><br></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjZhOWYyNDEwLTkzMTEtNDA2MC05ODVjLWU4NjhmNDQzZjgwYSJ9.nKZj-4sB3m-9-J-AYBWenP6Y2GKKqnr8dThwxJXg0Wg" class="fr-fic fr-fil fr-dib" width="1212" style="width: 1214px; height: 745.909px;" height="746"></span></p><p><span style="font-size: 10pt;"><strong>Fig 2. Generate API keys in Tenable</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">Copy Both the &#39;Access Key&#39; and the &#39;Secret Key&#39;, make note of these as you will not be able to access them again once you leave the page.&nbsp;</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">Now head back to Halo and fill in the required details in the details tab of the integration. Paste the &#39;Access Key&#39; into the &#39;Public API Key&#39; field. Paste the &#39;Secret Key&#39; into the &#39;Private API Key&#39; field. Enter the Tenable URL into the URL field. Then hit save.</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImNhMjlmYWMyLTFhYzQtNDg3My05ZTM1LTg2NzUwNWI4MjViMiJ9.jzN11hURcq4PyMcy55xMOrHgSbKY3xcwU0Nd0zdv7t8" class="fr-fic fr-fil fr-dib" width="1220" style="width: 1222px; height: 377.257px;" height="377"></span></p><p><span style="font-size: 10pt;"><strong>Fig 3. Fields to complete in Halo</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">After saving, check you are connected by using the &#39;Test Configuration&#39; button. If this returns a pop-up stating &#39;Test successful&#39; you have connected successfully.&nbsp;</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 18px;"><strong>Site Mappings</strong></span></p><p><span style="font-size: 14px;">Now head to the &#39;Sites&#39; tab to setup site mappings. Tenable does not have a concept of sites or customers, so to determine which site an asset should be created against you can use site rules. These rules are based on field values, if a rule is matched the asset will be assigned to the site of the mapping. For example if an asset in Tenable has a field with a value &#39;x&#39; it will be imported under a chosen site in Halo. To do this, add a site rule to the table, select the Halo site you would like the asset to go to, add to the criteria table. Here select the Halo field that you would like to base the criteria on, then set the rule type and the outcome needed in the field to match the rule.&nbsp;</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">For example, if I set up a rule as shown in <strong>Fig 4</strong>, all assets that have a value equal to &#39;Tenableasset&#39; in their (Halo) Name field will match the rule and be imported to the site &#39;Terry&#39;s Chocolates/Melbourne1234).&nbsp;</span></p><p><br></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjA0NzI3ZDk4LTYyZGEtNDJjNC05ODliLTMzMmEyYjcyYjhhZSJ9.dbS0duq_BX0eO1x0JrbdOCAiygdC992IHpgyoEMq1Y0" class="fr-fic fr-fil fr-dib" width="603" style="width: 605px; height: 610.186px;" height="610"></span></p><p><span style="font-size: 10pt;"><strong>Fig 4. Site rule example</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">You will also need to set a default site for assets, this ensures any assets that do not match a site rule are still imported, they will be imported to the chosen site.</span></p><p><span style="font-size: 14px;">&nbsp;</span></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjdmNmY1NzIwLTY5YTItNDk4NS04NzZiLWNlYjBjNmUyNmFkNyJ9.lpUDAxzSfFzaFYW8bthsZDVRGbSlWsM9QtYFcYzUzTw" class="fr-fic fr-fil fr-dib" width="1218" style="width: 1220px; height: 473.52px;" height="474"></span></p><p><span style="font-size: 10pt;"><strong>Fig 5. Default site field</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 18px;"><strong>Asset Mappings</strong></span></p><p><span style="font-size: 14px;">Now head to the &#39;Assets&#39; tab. Here you will need to set an asset matching field, this is the field in Halo that will be matched on during the import. If the field value in Halo matches the value of the mapped Tenable field, an existing asset is updated otherwise an new one is created, if no match can be made a new asset will be created.</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">Now you will need to create the asset field mappings, this links a field in Tenable to a field in Halo. Ensure your matching field is in mapped here, as well as any other fields you would like to be populated.&nbsp;</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;"><strong>Setting Asset Types</strong></span></p><p><span style="font-size: 14px;">The asset types of the assets can either use a fixed type for all assets, be determined from a field, or use asset type mappings that are determined using rules based on the values of the mapped asset fields.</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">If you would like all imported assets to have the same asset type when imported set the &#39;Determining an Asset&#39;s type&#39; field to be &#39;use the same type for all Assets&#39; then set the &#39;Default Asset Type&#39; field to be the asset type you would like assets from Tenable to be. Figure 6 shows how to set this so all assets are imported as the &#39;Laptop&#39; asset type.</span></p><p><br></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjQ4OGNjYzg1LWZmYjYtNGNhYS1iNTEwLTc4YzMyOTcxNmNmYSJ9.snrsuimaCUXdSODeL9etzqJVjGuaB5mwaLYcaHQSTC4" class="fr-fic fr-fil fr-dib" width="672" style="width: 674px; height: 388.598px;" height="389"></span></p><p><span style="font-size: 10pt;"><strong>Fig 6. Settings for all assets to be imported as the same type</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">If you would like all imported assets&#39; types to be determined by a particular field, set the set the &#39;Determining an Asset&#39;s type&#39; field to be &#39;Use a field to determine each Asset&#39;s type&#39;. Then in &#39;Field for determining an Asset&#39;s type&#39; choose the field you would like the type to depend on.</span></p><p><br></p><p><span style="font-size: 14px;">The field you choose must contain the name of the desired asset type, if this name can be matched to an existing asset type in Halo, it will be assigned this asset type. If the name is not the same as an asset type in Halo, a new asset type will be created. Note that the names must be identical in order to match.</span></p><p><br></p><p><span style="font-size: 14px;">This setting is used if you have a field in Tenable that already determines an asset&#39;s type and you would like the types to be consistent between Halo and Tenable. You will still need to populate the default asset type field, assets that do not have the selected field populated will be imported as the default asset type. In figure 7 asset types will be determined by the value in the field &#39;Operating System&#39;.&nbsp;</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjFiNGQzNjE2LTIwMGQtNDdkNC04MGFlLWU2N2E1MmVmMjMwZiJ9.eN_kNqt58GhUaXSOIQrEHLoh9T25kRp7yFW_xmmlWIA" class="fr-fic fr-fil fr-dib" width="604" style="width: 606px; height: 448.234px;" height="448"></span></p><p><span style="font-size: 10pt;"><strong>Fig 7. Setting for assets to be imported based on a field</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">If you would like asset types to be determined by asset rules set the set the &#39;Determining an Asset&#39;s type&#39; field to be &#39;Determine asset type using rules&#39;. Now you will be able to set asset&#39;s types based on rules, These rules are based on field values, and if matched will assign an asset to the chosen asset type. When creating a rule first add criteria for the rule, select the Halo field that you would like to base the criteria on, then set the rule type and the outcome needed in the field to match the rule. If an asset matches this rule it will be imported as this asset type. For example, in <strong>Fig 8</strong> the rule I have set up will check the name field of an asset, if the name begins with &#39;LAP&#39; the asset will be imported with the &#39;Laptop&#39; asset type.&nbsp;</span></p><p><br></p><p><span style="font-size: 14px;"><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjExNzA0N2YzLTRhM2UtNDEwOS1iOGVjLWI1MTQ4NDg0NDNkYiJ9.9mNzibIPPkoeBkQBv5a8FGeWtOwXWgz1P0dTwFFwjjg" width="554" style="box-sizing: inherit; border-style: none; cursor: pointer; padding: 0px 1px; user-select: none; text-align: left; color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; width: 556px; height: 547.236px; max-width: none !important;" id="isPasted" class="fr-fil fr-dib" height="547"></span></p><p><span style="font-size: 10pt;"><strong>Fig 8. Determining asset type with Rule setup</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">If an asset is imported that does not match any of these rules, it will be created under the default asset type. Alternatively, if you would like to not import assets that do not match these rules, set the &#39;Default Asset type&#39; to &#39;Don&#39;t import assets that do not match any rules&#39;.</span></p><p id="isPasted"><span style="font-size: 14px;"><br></span></p><p id="isPasted"><span style="font-size: 14px;"><strong>Setting Asset group</strong></span></p><p><span style="font-size: 14px;">If a new asset type is created for an imported asset you will need to set the group that this asset type comes under. Set this on the setting shown in figure 9.&nbsp;</span></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImMwOGI5MjNjLWYwY2UtNGMzYy05YTU1LTRjNWY0OTk3NTAxMCJ9.hoJvcz0_KYIy8Y4QqJSGMQ-CWfYlLHPeQcNvlN8uwXw" class="fr-fic fr-fil fr-dib" width="466" height="167"></span></p><p><span style="font-size: 10pt;"><strong>Fig 9. Default group for new asset types setting</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 18px;"><strong>Miscellaneous Settings</strong></span></p><p><span style="font-size: 14px;"><strong>Deactivate Assets in Halo when they are deleted from Tenable</strong> (Halo Integrator only)- If you have enabled the Halo integrator for this integration, this setting will deactivate any assets in Halo when they are deleted in tenable.&nbsp;</span></p><p><span style="font-size: 14px;"><strong>Don&#39;t create new Assets-&nbsp;</strong>If enabled will only import assets that can be matched to an existing asset in Halo. Any assets that cannot be matched to the matching field will not be created/imported.&nbsp;</span></p><p><span style="font-size: 14px;"><strong>Don&#39;t update the Asset type for existing or matched Assets</strong>- If enabled, any assets that match to an existing asset when importing will not update the existing asset with a different asset type from Tenable. This allows you to change asset type data in Tenable without it affecting the existing assets in Halo.&nbsp;</span></p><p><span style="font-size: 14px;"><strong>Don&#39;t update the asset site for existing or matched assets</strong>- If enabled, any assets that match to an existing asset when importing will not update the existing asset with a new site. This allows you to change asset site rules without it affecting the existing assets in Halo.&nbsp;</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 18px;"><strong>Importing</strong></span></p><p><span style="font-size: 14px;">The user must have at least basic user permissions and &quot;Can View&quot; access control permissions for the asset objects they want to export.</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">Before importing the assets you must first complete an export, to do this hit &#39;Start Export&#39;.</span></p><p><br></p><p><span style="font-size: 14px;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjgyNzVjN2FmLTkxZGItNDNlOS1hMGVkLThiZjAzZjIyMTdjNyJ9.PIBbdRE2Q510E8H8aqeR2C2pQ94JhxWPavXFzdaApCI" class="fr-fic fr-fil fr-dib" width="1217" style="width: 1219px; height: 714.004px;" height="714"></span></p><p><span style="font-size: 10pt;"><strong>Fig 10. Start export</strong></span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">When the export has started it will show the status of &#39;QUEUED&#39; or &#39;IN PROGRESS&#39; in the progress feed column. You can check the status of the export at any time, using the &#39;Check Export Status&#39; button. Once the export has finished the progress feed will change to &#39;FINISHED&#39;. Once this is finished you can run the import, using the &#39;Import Assets&#39; button. When importing you will need to select an export to import assets from. Exports will be retained for 7 days and then automatically removed or they can be manually deleted.</span></p><p><span style="font-size: 14px;"><br></span></p><p><span style="font-size: 14px;">To import assets on a recurring schedule you will need to enable the Halo integrator. This can be enabled under the &#39;Syncing&#39; tab. When enabled the export and import will run on a scheduled basis.&nbsp;</span></p><p><br></p>
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.