Data Sources

A data source is any product that feeds data into the Tenable Exposure Management interface. Once you have configured a data source for use with Tenable Exposure Management, the application automatically ingests data from that Tenable Exposure Management product.

You can configure the following Tenable products as data sources:

  1. Deploy Tenable Vulnerability Management according to the steps outlined in the Tenable Vulnerability Management User Guide, or based on guidelines received directly from Tenable Professional Services.

  2. Configure Tenable Vulnerability Management for use with Tenable Exposure Management by:

    • Creating and applying asset tags

    • Creating and launching scans to generate asset data

Tip: For more detailed information on configuring Tenable Vulnerability Management for use with Tenable Exposure Management, see the Tenable Vulnerability Management topic in the Tenable Exposure Management Deployment Guide.

  1. Deploy Tenable Security Center according to the steps outlined in the Tenable Security Center User Guide, or based on guidelines received directly from Tenable Professional Services.

  2. Once you have installed Tenable Security Center, follow the Tenable Exposure Management Synchronization steps outlined in the Tenable Security Center User Guide.

Tip: For more detailed information on configuring Tenable Security Center for use with Tenable Exposure Management, see the Tenable Security Center topic in the Tenable Exposure Management Deployment Guide.

  1. Deploy Tenable Web App Scanning according to the steps outlined in the Tenable Web App Scanning User Guide, or based on guidelines received directly from Tenable Professional Services.

  2. Create some quick scans to provide a high-level assessment of the target to establish your baseline.

Tip: For more detailed information on configuring Tenable Web App Scanning for use with Tenable Exposure Management, see the Tenable Web App Scanning topic in the Tenable Exposure Management Deployment Guide.

Deploy Tenable Cloud Security according to the steps outlined in the Tenable Cloud Security User Guide, or based on guidelines received directly from Tenable Professional Services.

Tip: For more detailed information on configuring Tenable Cloud Security for use with Tenable Exposure Management, see the Tenable Cloud Security topic in the Tenable Exposure Management Deployment Guide.

  1. If necessary, activate Tenable Identity Exposure for use within your Tenable Exposure Management platform.

  2. Deploy Tenable Identity Exposure according to the steps outlined in the Tenable Identity Exposure User Guide, or based on guidelines received directly from Tenable Professional Services.

  3. Configure Tenable Identity Exposure for use with Tenable Exposure Management by:

    • Downloading and configuring the license file

    • Downloading and installing the Secure Relay

    • Configuring Forests

Tip: For more detailed information on configuring Tenable Identity Exposure for use with Tenable Exposure Management, see the Tenable Identity Exposure topic in the Tenable Exposure Management Deployment Guide.

Important: Tenable Exposure Management only imports asset data from Tenable Attack Surface Management.

  1. Deploy Tenable Attack Surface Management according to the steps outlined in the Tenable Attack Surface Management User Guide, or based on guidelines received directly from Tenable Professional Services.

  2. Configure the application for use with Tenable Vulnerability Management. This ensures that usable data gets pulled into Tenable Exposure Management.

  3. Configure Tenable Attack Surface Management for use with Tenable Exposure Management by:

    • Configuring domains within Tenable Attack Surface Management

    • Configuring data sets and confirming your entire attack surface is present

Tip: For more detailed information on configuring Tenable Attack Surface Management for use with Tenable Exposure Management, see the Tenable Attack Surface Management topic in the Tenable Exposure Management Deployment Guide.

  1. Install the Tenable OT Security appliance according to the steps outlined in the Tenable OT Security User Guide.

  2. (Optional) If you want to pair your sensors with the Industrial Core Platform (ICP), install the OT Security Sensor according to the steps outlined in the Tenable OT Security User Guide.

  3. Generate a Tenable OT SecurityLinking Key and determine your Cloud Site according to the steps outlined in the Tenable Vulnerability Management User Guide. Copy and save this information to link the connector to Tenable Exposure Management.

  4. Integrate your Tenable OT Security appliance with Tenable Exposure Management according to the steps outlined in the Tenable OT Security User Guide.

Tip: For more detailed information on configuring Tenable OT Security for use with Tenable Exposure Management, see the Tenable OT Security topic in the Tenable Exposure Management Deployment Guide.

Data Timing

Data within Tenable Exposure Management refreshes on the following cadence:

  • Asset Data — Asset information is updated every time the asset is seen as part of a scan.

  • Tag Application — When a tag is first created, it can take several hours to assign the tag to the appropriate asset, depending on the number of assets and the tag's rules.

  • Tag Reevaluation — Every 12 hours, Tenable Exposure Management automatically reevaluates tags to ensure they apply to newly discovered assets, and are removed from any inactive assets.

  • Tenable Cloud Security data — Tenable Exposure Management automatically refreshes Tenable Cloud Security data every 24 hours.