Configure the Nutanix Prism Central Integration for Tenable Security Center

Required User Role: Scan Operator, Standard User, Scan Manager, or Administrator.

Required Scan Permissions: Can Scan.

In Tenable Security Center, configure Nutanix vulnerability scans by choosing Nutanix Prism Central, within the Miscellaneous credential templates.

Required Permissions

Within Nutanix Prism Central, you must have view-only permissions (or a custom role), since the integration performs only read operations.

Request Operation User Role
AHV VMs View Virtual Machine
Hypervisor Host View Host
Cluster Data View Cluster

Scan Configuration

Complete the following steps to configure the Tenable Security Center with the Nutanix Prism Central integration.

  1. Log in to your Tenable Security Center user interface.

  2. In the left navigation pane, click Scanning.

    A menu appears.

  3. Click Credentials.

    The Credentials page appears.

  4. Click +Add at the top of the screen.

    The Add Credential page appears.

  5. In the Miscellaneous section, click Nutanix Prism Central.

    The Add Credential page for Nutanix Prism Central appears.

  6. In the Name box, type a name for the credential.

  7. (Optional) Add a description.

  8. (Optional) Add a label to the credential.

    For more information about labels, see Labels in the Tenable Security Center documentation.

  9. Configure each option for the selected credential.

    Option Description Required
    Nutanix Host The hostname or IP address of the Nutanix Prism Central host. Yes
    Nutanix Port The port for the Nutanix Prism Central host. By default, Tenable Security Center uses 9440. Yes
    Username The username for the Nutanix Prism Central account. Yes
    Password The password for the Nutanix Prism Central user. Yes
    Discover Hosts When enabled, Tenable Security Center adds all discovered Nutanix hosts to the list of scan targets. Enabled by default. No
    Discover Virtual Machines When enabled, Tenable Security Center adds all discovered Nutanix virtual machines to the list of scan targets. Enabled by default. No
    HTTPS When enabled, Tenable connects using secure communication (HTTPS). When disabled, Tenable connects using standard HTTP. Enabled by default. Yes
    Verify SSL Certificate When enabled, Tenable verifies that a trusted certificate authority (CA) signed the SSL certificate on the server. If you use a self-signed certificate, disable this setting. No

  10. Click Submit to save your credential.