Data Sources

A data source is any product that feeds data into the Tenable Exposure Management interface. Once you have configured a data source for use with Tenable Exposure Management, the application automatically ingests data from that Tenable Exposure Management product.

You can configure the following Tenable products as data sources:

Tenable One AI Exposure

To configure Tenable One AI Exposure data sources:

1. Deploy Tenable One AI Exposure according to the steps outlined in the Tenable One AI Exposure User Guide, or based on guidelines received directly from Tenable Professional Services.

2. Configure Tenable One AI Exposure for use with Tenable Exposure Management by:

   • Reviewing the Tenable One AI Exposure key terms.

   • Reviewing the data metrics within Tenable One AI Exposure.

   • Integrating AI applications with Tenable One AI Exposure.

   • (Optional) Reviewing and configuring additional Tenable One AI Exposure policy settings.

Tenable One Vulnerability Management

To configure Tenable One Vulnerability Management data sources:

1. Deploy Tenable One Vulnerability Management according to the steps outlined in the Tenable One Vulnerability Management User Guide, or based on guidelines received directly from Tenable Professional Services.

2. Configure Tenable One Vulnerability Management for use with Tenable Exposure Management by:

   • Creating and applying asset tags

   • Creating and launching scans to generate asset data

Tip: For more detailed information on configuring Tenable One Vulnerability Management for use with Tenable Exposure Management, see the Tenable One Vulnerability Management topic in the Tenable Exposure Management Deployment Guide.

Tenable Security Center

To configure Tenable Security Center data sources:

1. Deploy Tenable Security Center according to the steps outlined in the Tenable Security Center User Guide, or based on guidelines received directly from Tenable Professional Services.

2. Once you have installed Tenable Security Center, follow the Tenable Exposure Management Synchronization steps outlined in the Tenable Security Center User Guide.

Tip: For more detailed information on configuring Tenable Security Center for use with Tenable Exposure Management, see the Tenable Security Center topic in the Tenable Exposure Management Deployment Guide.

Tenable One Web App Scanning

To configure Tenable One Web App Scanning data sources:

1. Deploy Tenable One Web App Scanning according to the steps outlined in the Tenable One Web App Scanning User Guide, or based on guidelines received directly from Tenable Professional Services.

2. Create some quick scans to provide a high-level assessment of the target to establish your baseline.

Tip: For more detailed information on configuring Tenable One Web App Scanning for use with Tenable Exposure Management, see the Tenable One Web App Scanning topic in the Tenable Exposure Management Deployment Guide.

Tenable One Cloud Exposure

To configure Tenable One Cloud Exposure data sources:

Deploy Tenable One Cloud Exposure according to the steps outlined in the Tenable One Cloud Exposure User Guide, or based on guidelines received directly from Tenable Professional Services.

Tip: For more detailed information on configuring Tenable One Cloud Exposure for use with Tenable Exposure Management, see the Tenable One Cloud Exposure topic in the Tenable Exposure Management Deployment Guide.

Tenable One Identity Exposure

To configure Tenable One Identity Exposure data sources:

1. If necessary, activate Tenable One Identity Exposure for use within your Tenable Exposure Management platform.

2. Deploy Tenable One Identity Exposure according to the steps outlined in the Tenable One Identity Exposure User Guide, or based on guidelines received directly from Tenable Professional Services.

3. Configure Tenable One Identity Exposure for use with Tenable Exposure Management by:

   • Downloading and configuring the license file

   • Downloading and installing the Secure Relay

   • Configuring Forests

Tip: For more detailed information on configuring Tenable One Identity Exposure for use with Tenable Exposure Management, see the Tenable One Identity Exposure topic in the Tenable Exposure Management Deployment Guide.

Tenable One Attack Surface Management

To configure Tenable One Attack Surface Management data sources:

1. Deploy Tenable One Attack Surface Management according to the steps outlined in the Tenable One Attack Surface Management User Guide, or based on guidelines received directly from Tenable Professional Services.

2. Configure the application for use with Tenable One Vulnerability Management. This ensures that usable data gets pulled into Tenable Exposure Management.

3. Configure Tenable One Attack Surface Management for use with Tenable Exposure Management by:

   • Configuring domains within Tenable One Attack Surface Management

   • Configuring data sets and confirming your entire attack surface is present

Tip: For more detailed information on configuring Tenable One Attack Surface Management for use with Tenable Exposure Management, see the Tenable One Attack Surface Management topic in the Tenable Exposure Management Deployment Guide.

Tenable One OT Exposure

To configure Tenable One OT Exposure data sources:

1. Install the Tenable One OT Exposure appliance according to the steps outlined in the Tenable One OT Exposure User Guide.

2. (Optional) If you want to pair your sensors with the Industrial Core Platform (ICP), install the OT Security Sensor according to the steps outlined in the Tenable One OT Exposure User Guide.

3. Generate a Tenable One OT ExposureLinking Key and determine your Cloud Site according to the steps outlined in the Tenable One Vulnerability Management User Guide. Copy and save this information to link the connector to Tenable Exposure Management.

4. Integrate your Tenable One OT Exposure appliance with Tenable Exposure Management according to the steps outlined in the Tenable One OT Exposure User Guide.

Tip: For more detailed information on configuring Tenable One OT Exposure for use with Tenable Exposure Management, see the Tenable One OT Exposure topic in the Tenable Exposure Management Deployment Guide.

Data Timing

Data within Tenable Exposure Management refreshes on the following cadence:

• Asset Data — Asset information is updated every time the asset is seen as part of a scan.

• Tag Application — When a tag is first created, it can take several hours to assign the tag to the appropriate asset, depending on the number of assets and the tag's rules.

• Tag Reevaluation — Every 12 hours, Tenable Exposure Management automatically reevaluates tags to ensure they apply to newly discovered assets, and are removed from any inactive assets.

• Tenable One Vulnerability Management data — Tenable Exposure Management automatically refreshes Tenable One Vulnerability Management every 2-4 hours.

• Tenable One Cloud Exposure data — Tenable Exposure Management automatically refreshes Tenable One Cloud Exposure data every 24 hours.