Information the Nutanix Prism Central Integration Collects

Tenable attempts to collect the following data about all hypervisors and virtual machines that the Prism Central host manages:

  • Clusters

  • Nodes

  • IP addresses

  • Host software versions

  • Services

  • Architecture

Tenable uses this data to scan the Nutanix AOS and AHV products for known host vulnerabilities. When you enable Discover Hosts or Discover Virtual Machines, Tenable also adds the hosts and virtual machines it finds to the scan targets. For more information, see Auto-Discovery of Hosts and Virtual Machines.

What the Nutanix Prism Central Integration Does Not Collect

  • Information about the operating systems of the collected hosts.

  • All information about the virtual machines themselves, for example operating system details.

  • Any data that requires authentication to a discovered host. Tenable authenticates only to the Prism Central API and never to the hosts or virtual machines it discovers.

Note: To scan discovered virtual machines for operating system vulnerabilities, configure additional SSH or Windows credentials for those virtual machines in the scan.

Nutanix Prism Central Integration Limitations

  • The integration currently does not support Compliance scanning.

  • In Tenable One Vulnerability Management, the Nutanix Prism credential integration supports only the Advanced Network Scan template.

  • To prevent duplicate scans of discovered targets during auto-discovery, specify a single initial host and assign a scanner group containing only one scanner. Running auto-discovery across multiple scanners can cause Tenable to scan the same target multiple times.