Configure the Nutanix Prism Central Integration for Tenable Nessus

In Tenable Nessus, within the Advanced Network Scan template, configure Nutanix vulnerability scans by selecting Nutanix Prism Central under the Miscellaneous credentials category.

Required Permissions

Within Nutanix Prism Central, you must have view-only permissions (or a custom role), since the integration performs only read operations.

Request Operation User Role
AHV VMs View Virtual Machine
Hypervisor Host View Host
Cluster Data View Cluster

Scan Configuration

Complete the following steps to configure Tenable Nessus with the Nutanix Prism Central integration.

  1. Log in to your Tenable Nessus user interface.

  2. In the left navigation pane, click Scans.

    The Scans page appears.

  3. In the upper-right corner of the page, click the Create a Scan button.

    The Select a Scan Template page appears.

  4. Select a scan template.

    The scan configuration page appears.

  5. In the Name box, type a name for the scan.

  6. In the Targets box, type an IP address, hostname, or range of IP addresses.

  7. (Optional) Add a description, folder location, and scanner location, and specify target groups.

  8. Click the Credentials tab.

    The Credentials pane appears.

  9. In the Select a Credential menu, select Nutanix Prism Central.

    The Settings pane for the selected credential appears.

  10. Configure each option for the selected credential.

    Option Description Required
    Nutanix Host The IP address or hostname of the Nutanix Prism Central host. Yes
    Nutanix Port The TCP port that the Nutanix Prism Central host listens on for communications from Tenable. By default, Tenable Nessus uses 9440. Yes
    Nutanix Prism Central Authentication Method Choose from a list of authentication methods: Username and Password (manual entry, the default) or PAM Integration, which uses a specific Privileged Access Management (PAM) integration to gather Nutanix Prism Central authentication credentials from the available list. Yes
    Username The username for the Nutanix Prism Central account that Tenable uses to authenticate to the API. Yes (if Username and Password authentication is selected)
    Password The password for the Nutanix Prism Central user. Yes (if Username and Password authentication is selected)
    Discover Hosts When enabled, Tenable adds all discovered Nutanix hosts to the list of scan targets. Enabled by default. No
    Discover Virtual Machines When enabled, Tenable adds all discovered Nutanix virtual machines to the list of scan targets. Enabled by default. No
    HTTPS When enabled, Tenable connects using secure communication (HTTPS). When disabled, Tenable connects using standard HTTP. Enabled by default. Yes
    Verify SSL Certificate When enabled, Tenable verifies that a trusted certificate authority (CA) signed the SSL certificate on the server. If you use a self-signed certificate, disable this setting. No

  11. Do one of the following:

    • If you want to save without launching the scan, click Save.

    • If you want to save and launch the scan immediately, click Save & Launch.

    Note: If you scheduled the scan to run at a later time, the Save & Launch option is not available.