Asset Repositories

Asset repositories can store data from Tenable Nessus, Tenable Agent, and Tenable One OT Exposure scans, as well as IPv4 and IPv6 data from Tenable Network Monitor scans.

Tenable Security Center assigns UUIDs to assets to uniquely identify vulnerability data in asset repositories, since not all assets have IP addresses or Tenable UUIDs.

• IP data: IPv4 and IPv6 data collected from active and passive scans. These assets are identified by network address.

• Tenable Agent data: Vulnerability data collected from Tenable Agents. These assets are identified by agent ID, which is essential for accurately tracking assets that may frequently change IP addresses (e.g., laptops or mobile devices).

• Tenable One OT Exposure data: Data from Tenable One OT Exposure. Since not all operational technology assets have traditional IP addresses, Tenable Security Center uses the Tenable One OT Exposure UUID to identify these assets and their associated data. For more information about viewing Tenable One OT Exposure data in Tenable Security Center, see Tenable One OT Exposure Instances.

For more information, see Add a Repository.

Asset Repository Options

Option	Description
General
Name	The repository name.
Description	(Optional) A description for the repository.
Data
IP Ranges	Specifies the IP address range of vulnerability data you want to store in the repository. Type the range as a comma-separated list of IP addresses, IP address ranges, and/or CIDR blocks.
Access
Organizations	Specifies which organizations have access to the vulnerability data stored in the repository. If groups are configured for the organization, Tenable Security Center prompts you to grant or deny access to all of the groups in the organization. For more granular control, grant access within the settings for that group.
Vulnerability Data Lifetime (Data Expiration Settings)
Active	The number of days you want Tenable Security Center to retain agent scan vulnerability data stored in agent repositories. The default value of this option is 365 days.
Passive	The number of days you want Tenable Security Center to retain Tenable Network Monitor vulnerability data stored in IP repositories. The default value of this option is 7 days.
Compliance	The number of days you want Tenable Security Center to retain audit compliance data stored in repositories. The default value of this option is 365 days.
Mitigated	The number of days you want Tenable Security Center to retain mitigated vulnerability data. The default value of this option is 365 days.