Internet Access

The Tenable Patch Server requires access to the Internet when allowing Internet-based clients to communicate with the server. This is an outbound connection only and uses the TCP port 443. See Connecting to Internet Destinations.

Internet Access Requirements

The Tenable Patch Server requires access to the following URL:

https://*Adaptiva.Cloud

Ensure that the following Request Methods are allowed:

HEAD, GET, POST

When using proxies, verify whether you must explicitly allow these request methods. Additionally, use the DELETE request method (required) when using CDN services in the Adaptiva Cloud Service for the customer server.

Note: Disable the SSL inspection feature.

Allow Access to Internet Destinations

Tenable Patch Server and Internet-based clients must be allowed to connect to the Internet destinations in the table below. All ports are outbound only.

Source Description Destination Ports

Tenable and Internet-based clients

Adaptiva Services

*.Adaptiva.cloud

*.opendns.com

https (TCP port 443, ICMP, or UDP 3478)

Tenable and Internet-based clients

Adaptiva CDN

*.Adaptivacdn.cloud cloud.tenable.com

https (TCP port 443)

Tenable Patch Server

Approval messaging, email and sms messages

api.sendgrid.com

api.twilio.com

Note: Tenable uses external partners (Twilio and SendGrid) to send notification texts and emails for alerts such as patch approvals or password change requests. Per their documentation, they do retain message content for a brief period of time. Tenable does not send any personal identification over these channels.
https (TCP port 443)

As of December 1, 2020, in the Adaptiva CDN Service Level Agreement provides CDN storage without additional cost, unless storage exceeds certain limits. The table below shows the included storage and overage costs for the Adaptiva CDN service

Storage Use Included Storage Overage Costs

Data Storage

2 TB per customer

$300 per 1TB (or part thereof), per year

Data Transfer / Egress

1 GB per licensed endpoint per month

$0.02 per 1GB, per month

Tenable Patch Server Installation Folder

The first user input required for the Tenable Patch Server installation is the installation folder location. The default is C:\Program Files\Tenable\PatchServer.

You may choose a custom installation folder location. Tenable recommends either not installing on the Operating System C:\ drive or moving the Content Library after the installation.

Caution: Do not install the Server on the Operating System (OS) C: drive. The product log files and the Adaptiva Content Library installed with the Server grow over time, which impacts storage and performance on the OS C: drive.

Licensing Tenable Products

Tenable Patch Management requires a license for each active client. The license key contains the licensed company name and client count. The Tenable Patch Server periodically counts all active, healthy, reporting clients as licensed clients.

Have your license key available for the Server installation. You may enter the license key when installing the Server, or enter the license key using the after completing the installation. If you are starting the for the first time or your key has expired, the software prompts you for a license key at login.