View Host Details

Required User Role: Organizational user with appropriate permissions. For more information, see User Roles.

You can drill into analysis views to view details for a specific host on your network.

To view host details from the Vulnerability Analysis page:

  1. Log in to Tenable.sc via the user interface.

  2. Click Analysis > Vulnerabilities.

    The Vulnerability Analysis page appears.

  3. In the drop-down box, click Vulnerability List.

    The Vulnerability List tool appears.

  4. In the IP Address column, click info to view host details for a specific vulnerability instance.

    Tip: A vulnerability instance is a single instance of a vulnerability appearing on an asset, identified uniquely by plugin ID, port, and protocol.

    The host details panel appears.

    Section Actions
    System Information

    View information about the host system.

    • IP Address — The host's IP address, if available.

    • UUID — The host's UUID, if available.

    • NetBIOS Name — The host's NetBIOS name, if available.

    • DNS Name — The host's DNS name, if available.

    • MAC Address — The host's MAC address, if available.

    • OS — The operating system running on the host, if available.

    • CPE — The host's application common platform enumeration (CPE).

    • Score — The cumulative score for all vulnerability instances on the host. For more information about vulnerability scoring, see CVSS vs. VPR.

      Tip: A vulnerability instance is a single instance of a vulnerability appearing on an asset, identified uniquely by plugin ID, port, and protocol.

    • Repository — The repository that contains vulnerability data associated with the host.

    • Last Scan — The date and time Tenable.sc last scanned the host.

    • Passive Data — Indicates whether a passive scan detected the vulnerability.

    • Compliance Data — Indicates whether the scan that detected the vulnerability included compliance plugins.
    Vulnerabilities View the number of vulnerabilities on the host, organized by severity category. For more information, see CVSS vs. VPR.
    Links

    • View SANS and ARIN links for the host. If configured, this section also displays custom resource links.

    • Click a resource link to view details for the current IP address/agent IDs. For example, if the current IP address was a publicly registered address, click the ARIN link to view the registration information for that address.

    Assets View the asset lists containing the asset. For more information, see Assets.

To view host details from the Host Assets page:

  1. Log in to Tenable.sc via the user interface.

  2. Click Assets > Host Assets.

    The Host Assets page appears.

  3. Click the row for the host.

    The Host Asset Details page appears.

    Section Action
    Host Information

    View general information about the host.

    • Name — The name of the host.

    • System Type — The host's device type, as determined by plugin 54615.

    • Operating System — The operating system running on the host, if available.

    • IP Addresses — The host's IP address, if available.

    • MAC Addresses — The host's MAC address, if available.

    • Asset ID — The ID of the host.

    • Repository — The repository that contains vulnerability data associated with the host.
    Asset Criticality Rating

    (Requires Tenable.sc+ license) View the host's ACR and details about modifications to the ACR.

    • Overwrite Reasoning — The justification for overwriting the host's ACR.

    • Notes — Notes associated with overwriting the host's ACR.

    • Overwritten By — The user that overwrote the host's ACR.

    • ACR By Key Drivers — The key drivers used to calculate the host's ACR.

    For more information, see Asset Criticality Rating and ACR Key Drivers in the Tenable.io User Guide.

    To edit the host's ACR, see Edit an ACR Manually.
    Scan Information

    View scan information related to the host.

    • First Seen — The date and time Tenable.sc first detected the host on your network.
    • Last Seen — The date and time last Tenable.sc detected the host on your network.

    • Source — The type of scan that discovered the host on your network: Nessus Scan, NNM, LCE, or Agent Scan.
    Findings tab

    • View the vulnerabilities detected on the host. For more information, see CVSS vs. VPR.
    Installed Software tab View the software packages installed on the host, if available.