Examples: Asset Tagging

See the following configuration examples to tag assets for common use cases. For general information about tags, see Tags.

Example: Automatically Tag by Installed Software

Your company manages assets that run on two software types: Oracle and Wireshark. Your company assigns asset ownership to employees based on the software type. Employees must resolve any vulnerabilities identified on assets with the software type they manage.

As an administrator, you can create an automatic tag for each software type. Then, employees can search for assets by the Installed Software tag and filter Tenable Web App Scanning assets by the software type they manage.

Note: For more precise results, set the tag value to the appropriate NVD Common Platform Enumeration (CPE), for example, cpe:/a:microsoft:office.

To automatically tag assets by installed software:

  1. Create and automatically apply a tag for Oracle assets using the following settings:

    Option Value
    Category Installed Software
    Value Oracle
    Rules

    Enabled, with the following rule specified:

    • Match All
    • Category: Installed Software
    • Operator: is equal to
    • Value: Oracle

  2. Create and automatically apply a tag for Wireshark assets using the following settings:

    Option Value
    Category Installed Software
    Value Wireshark
    Rules

    Enabled, with the following rule specified:

    • Match All
    • Category: Installed Software
    • Operator: is equal to
    • Value: Wireshark
  3. Instruct employees to use the new tags to filter assets in the assets table or to search for assets from the tags table.

Example: Manually Tag by Priority

Your company owns sensitive assets and you want employees to prioritize addressing vulnerabilities on these assets first, regardless of the asset's other attributes (for example, the asset's VPR).

To make sure employees view and mediate these sensitive assets first, you can create a High Priority tag and manually add it to assets that you want employees to prioritize. Then, employees can search for assets using the High Priority tag to filter by the highest priority assets they manage.

To manually tag assets by priority:

  1. Create a tag for your highest priority assets using the following settings:

    Option Value
    Category Priority
    Value High Priority
    Value Description A custom description about the urgency of remediating the vulnerabilities on assets with this tag.

  2. Apply the tag manually to your highest priority assets.

  3. Instruct employees to use the new tag to filter assets in the assets table or to search for assets from the tags table.