TOC & Recently Viewed

Recently Viewed Topics

Organizations

An Organization is defined as a set of distinct Users and Groups and the resources they have available to them. These Users are assigned repositories and “zones” within one or more specified IP networks. “Users” refers to any non-administrator login account on SecurityCenter. “Groups” refers to collections of users with the same permissions within an Organization. “Zone” means that each Organization is made up of the systems within one or more IP networks.

Multiple Organizations can share the same repositories and the vulnerability data associated with the overlapping ranges will be shared between each Organization. Conversely, Organizations can be configured with their own discrete repositories to facilitate situations where data must be kept confidential between different organizational units.

The Organization is managed primarily by the Administrator and Security Manager users. The Administrator is responsible for creation of the Organization, the initial Security Manager creation and assignment, and maintenance. Users within the Organization are created by the Security Manager user or any user with the appropriate permission. User management is performed on a Group level and permissions to resources and objects are shared among the group.

It is important to consider these concepts when working with the built-in roles and creating custom ones as they relate to your organizational structure.

Creation of an Organization is a multi-step process. The screen capture below contains five areas: General, Scanning, Analysis, Custom Analysis Links, and Vulnerability Weights. Once the Organization is created the option to create the initial Security Manager user is presented.

The following table details the items that can be specified and configured when creating an Organization.

Option Description

General

Name

Organization name (Required)

Description

Descriptive text for the Organization.

Contact Information

Enter the relevant contact information for the organization being created including address, city, state, country, and phone number.

Scanning

 

Distribution Method

There are three options to select for choosing a Scan Zone for the Organization in this drop-down.

  • Automatic Distribution Only will automatically select the best Scan Zone(s) available for performing a scan.
  • Locked Zone will only use the selected Scan Zone as part of the Organization’s available Scan Zones for performing scans.
  • Selectable Zones allows users to select from the chosen Scan Zones to perform a scan from. Additionally, automatic distribution may be allowed from the chosen zones so the user does not have to make assumptions as to which zone is free or optimal for their scan.
 

Available Zones

When selecting Locked or Selectable zones for the distribution method, the list of available zones is displayed for Scan Zone selection. The zones are searchable by name or by scrolling the list of zones.

Restricted Scan Ranges IP ranges that the organization will not be able to scan.

Analysis

Accessible LCEs

Selection from a list of LCE(s) to which this Organization has access. The LCEs are searchable by name or by scrolling a list of LCEs.

Accessible Repositories

Selection from a list of Repositories to which the Organization will have access. The Repositories are searchable by name or by scrolling a list of Repositories.

Accessible Agent Capable Scanners

Selection from a list of Nessus scanners that are Nessus Agent enabled. Selecting one or more of the available scanners will add the ability for the Organization to import Nessus Agent results from the selected scanner.

Custom Analysis Links

 

A list of custom analysis links provided to users within the host vulnerability details when analyzing data outside of SecurityCenter is desired. Clicking the “Add Custom Link” option will create a new field to enter the link name and URL to look up additional data external to SecurityCenter.

 

For example:

 

http://example.com/index.htm?ip=%ip%

 

The “%ip%” reference is a variable that inserts the IP address of the current host into the specified URI.

Vulnerability Weights

Low

The vulnerability weighting to apply to “Low” criticality vulnerabilities for scoring purposes. (Default: 1)

Medium

The vulnerability weighting to apply to “Medium” criticality vulnerabilities for scoring purposes. (Default: 3)

High

The vulnerability weighting to apply to “High” criticality vulnerabilities for scoring purposes. (Default: 10)

Critical

The vulnerability weighting to apply to “Critical” criticality vulnerabilities for scoring purposes.(Default: 40)

Copyright © 2017. Tenable Network Security, Inc. All rights reserved. Tenable Network Security, Nessus, SecurityCenter Continuous View, Passive Vulnerability Scanner, and Log Correlation Engine are registered trademarks of Tenable Network Security, Inc. All other products or services are trademarks of their respective owners.