SecurityCenter 4.2 and Community Dashboard Site Released
Note: Tenable SecurityCenter is now Tenable.sc. To learn more about this application and its latest capabilities, visit the Tenable.sc web page.
Tenable Network Security is proud to announce the immediate availability of SecurityCenter 4.2. SecurityCenter is used to centralize and report on system and event data such as vulnerabilities, logs, NetFlow, configurations and more.
With SecurityCenter, multiple users and organizations can securely leverage Nessus scanners to perform distributed scans and system audits, Passive Vulnerability Scanners sniffing network traffic 24x7 and multiple Log Correlation Engines gathering logs from thousands of devices.
Sharing system and event data pervasively and securely across enterprise networks is a key component of Tenable's Unified Security Monitoring platform.
SecurityCenter 4.2 includes hundreds of updates based on feedback from Tenable's enterprise user community. The major features of SecurityCenter 4.2 include:
New Dashboard Types and Community Dashboards
SecurityCenter 4.2 includes a new "matrix" dashboard component, which is a live spreadsheet that can be hooked directly to logs, vulnerabilities and many other types of data. Examples are shown below:
|
Password Audit Results by Asset
|
Inbound and Outbound IDS Event,
|
|
Vulnerability Trending by Asset, Including |
|
These matrix components allow a tremendous amount of security, compliance, vulnerability and user activity information to be communicated to senior management and technical users.
Tenable has also established the following site to host hundreds of Tenable and user generated dashboards for sharing with the entire community of organizations that rely on SecurityCenter for their compliance and security monitoring needs. Posts are organized by compliance type (PCI, FISMA, etc.), security function (patch auditing, intrusion detection, etc.) and many other categories.
Many SecurityCenter users already interact with Tenable and other SecurityCenter users on the Tenable Discussions Forum. The Forum is an ideal place to share dashboards, filter tips and ideas for managing a wide variety of security and compliance information.
New Report Logic and Filtering
SecurityCenter also includes new reporting functions that allow even more detailed and high-level reports to be created in less time.
If the hundreds of default report templates for PCI, SANS CAG, OWASP or FISMA are not sufficient, SecurityCenter 4.2 users can now automatically "iterate" any report across a discrete list of IP addresses, user IDs, assets and ports.
In addition, report data can now be filtered on by specific groups of assets, by the compliance auditing results from specific Nessus .audit policy used in the scan, by the specific CVE or Microsoft bulletin and many other items.
Three new chapters are also included in the reporting templates to summarize all matching CVEs, all matching Microsoft bulletins and all software found by credentialed patch audits of Unix or Windows systems.
To Learn More
Tenable is in the process of producing several new webinars, white papers, blog entries and videos that introduce SecurityCenter. It is recommended that all existing SecurityCenter customers read the release notes on the Tenable Support Portal to learn how they can upgrade. If you are interested in contacting Tenable's sales team to learn more about SecurityCenter, please email us at [email protected].
Related Articles
Unified IT and Web App Security: On-Prem Web App Scanning Integrated into Security Center
October 17, 2023On-prem web app scanning is now available within Tenable Security Center, offering comprehensive exposure management with accurate analysis, OWASP Top 10 coverage and easy setup. Here’s what you need to know.
What Is VPR and How Is It Different from CVSS?
April 16, 2020This blog series will provide an in-depth discussion of vulnerability priority rating (VPR) from a number of different perspectives. Part one will focus on the distinguishing characteristics of VPR th...
Tenable Releases SecurityCenter Continuous View
August 9, 2012<p>Today, Tenable <a href="http://www.tenable.com/news-events/press-releases/2012-tenable-network-security-unveils-securitycenter-continuous-view" target="_self" title="Tenable Network Security Unveils SecurityCenter Continuous View">announced </a>the availability of a new edition of SecurityCenter, called Continuous View.</p> <p>This edition of SecurityCenter uniquely encompasses both scanning and monitoring, with the inclusion of Tenable's Passive Vulnerability Scanner (PVS). That makes SecurityCenter Continuous View uniquely capable of addressing vulnerability, configuration, and compliance management requirements for emerging technologies like mobile devices, cloud-based services, social applications, and virtual systems.</p> <p>The flexible licensing approach provided by SecurityCenter Continuous View allows enterprise customers to deploy PVS in much the same way as they do with Nessus within SecurityCenter, pretty much as many as needed.</p> <p>Existing SecurityCenter customers can upgrade to a ContinuousView license and begin to enjoy the benefits of continuous monitoring with PVS. These include:</p> <ul> <li>Real-time identification of server and client vulnerabilities </li> <li>Identification of mobile devices and their vulnerabilities </li> <li>Passive discovery of all internal and external web servers and databases </li> <li>Identification of trust and communication paths </li> <li>Passive monitoring of virtual environments </li> </ul>
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- SecurityCenter