Tiered Remote Repositories

Remote repositories allow you to share repository data from one Tenable Security Center deployment to your primary Tenable Security Center deployment via an SSH session.

A tiered remote repository configuration uses remote repositories to share data between multiple Tenable Security Center instances.

  • For environments that support more than 100,000 hosts or multiple Tenable Security Center consoles, Tenable recommends Tenable Security Center Director to provide additional operational insight to your Tenable environment.

  • If you plan to support 100,000-249,999 hosts, Tenable recommends a tiered remote repository configuration.
  • If you plan to support 250,000 or more hosts, Tenable requires a tiered remote repository configuration.

Tiered Tenable Security Center instances perform informal roles in your overall Tenable Security Center deployment. Tenable recommends at least one designated reporting Tenable Security Center and an additional Tenable Security Center instance for every 100,000 to 150,000 hosts on your network.

  • A scanning tier Tenable Security Center optimizes scanning by managing scan jobs across your attached scanners. Scanning tier Tenable Security Center instances prioritize efficient collection of scan data.
  • A reporting tier Tenable Security Center optimizes dashboards and reporting by centralizing the data collected by scanning tier Tenable Security Center instances. Tenable Security Center Director can serve as a reporting tier, bringing in data from scanning tiers as remote repositories and providing insight to operational activities such as active scan jobs, plugin updates, and scanner configurations.

Note: Your scanning tier and reporting tier Tenable Security Center instances must be running the same Tenable Security Center version.

Without a tiered remote repository configuration, enterprise-scale scanning and analysis may cause performance issues on a single Tenable Security Center. Tiered remote repositories optimize your analysis and report generation without negatively impacting scanning performance.

For more information, see Configure Tiered Remote Repositories.

Tip: Configuring tiered remote repositories does not allow you to monitor the status of scanning tier Tenable Security Center instances. To monitor the status of multiple Tenable Security Center instances, connect your Tenable Security Center instances to Tenable Security Center Director. For more information about Tenable Security Center Director, see the Tenable Security Center Director User Guide.