Database

Tenable.io supports Database authentication using PostgreSQL, DB2, MySQL SQL Server, Oracle, and MongoDB.

Database

Tenable.io supports two authentication methods for database credentials: Password or CyberArk.

Password

Option	Description
Username	(Required) The username for the database.
Password	The password for the supplied username.
Database Type	Tenable.io supports Oracle, SQL Server, MySQL, DB2, Informix/DRDA, and PostgreSQL.

CyberArk

CyberArk is a popular enterprise password vault that helps you manage privileged credentials. Tenable.io can get credentials from CyberArk to use in a scan.

Option	Description
Username	The target system’s username.
Central Credential Provider Host	The CyberArk Central Credential Provider IP/DNS address.
Central Credential Provider Port	The port on which the CyberArk Central Credential Provider is listening.
CyberArk AIM Service URL	The URL of the AIM service. By default, this field uses `/AIMWebservice/v1.1/AIM.asmx`.
Central Credential Provider Username	If the CyberArk Central Credential Provider is configured to use basic authentication, you can fill in this field for authentication.
Central Credential Provider Password	If the CyberArk Central Credential Provider is configured to use basic authentication, you can fill in this field for authentication.
Safe	The safe on the CyberArk Central Credential Provider server that contained the authentication information you would like to retrieve.
CyberArk Client Certificate	The file that contains the PEM certificate used to communicate with the CyberArk host.
CyberArk Client Certificate Private Key	The file that contains the PEM private key for the client certificate.
CyberArk Client Certificate Private Key Passphrase	The passphrase for the private key, if required.
AppId	The AppId that has been allocated permissions on the CyberArk Central Credential Provider to retrieve the target password.
Folder	The folder on the CyberArk Central Credential Provider server that contains the authentication information you would like to retrieve.
CyberArk Account Details Name	The name of the credentials that you want to gather.
Use SSL	If CyberArk Central Credential Provider is configured to support SSL through IIS check for secure communication.
Verify SSL Certificate	If CyberArk Central Credential Provider is configured to support SSL through IIS and you want to validate the certificate, select this option. Refer to the custom_CA.inc documentation for how to use self-signed certificates.
Database Type	Tenable.io supports Oracle, SQL Server, MySQL, DB2, Informix/DRDA, and PostgreSQL.

MongoDB

Option	Description
Username	(Required) The username for the database.
Password	(Required) The password for the supplied username.
Database	Name of the database to audit.
Port	Port the database listens on.

Copyright 2017 - 2018 Tenable, Inc. All rights reserved. Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable, Inc. Tenable, Tenable.io, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.