Manage Elastic Asset Patterns

In Tenable One Attack Surface Management, elastic asset patterns turn any matching asset into an elastic asset, so that Tenable One Attack Surface Management tracks a rotating IP address as part of the same asset instead of treating each IP address as a new asset. You can match a pattern on hostname, IP address, or record value (the CNAME or MX target), and set each pattern to either make matches elastic or keep matches non-elastic (for example, to exempt a specific host from a broader elastic pattern).

The following are the characteristics of elastic asset patterns:

• Elastic asset patterns are scoped to the current inventory. Patterns in one inventory do not affect other inventories.

• Tenable One Attack Surface Management evaluates patterns for an inventory in order, from first to last. For a given asset, Tenable One Attack Surface Management applies the first pattern that matches and does not evaluate any patterns below it in the list.

• Tenable One Attack Surface Management also maintains a recommended set of global baseline patterns shared by all inventories. Your own patterns always take precedence; Tenable One Attack Surface Management applies the global baseline afterward as a fallback, unless you opt out. See Global Baseline Patterns.

Note: Elastic asset patterns apply across an entire inventory. To mark a single source as elastic when you add it, see the Elastic source option in Add Sources.