Can you manually import Tenable Nessus Results??

Donald Small1 · ‎10-05-2018

We are looking at the Security Operations module for possible deployment within our environment. We use Tenable for vulnerability scanning. WITHOUT using the Tenable.io® for Vulnerability Response plugin available in the store, can you manually import the Tenable Nessus results? My guess is that it would be handled the same as any other data set import, but I have been asked to verify.

Is there anyone out there doing this today with Tenable?

Thanks in advance!

Chris McDevitt · ‎10-01-2019

Donald,

There are a few tricky things when importing items. First, is the CI matching rules which need to be triggered. Next, you will need to trigger the Assignment Rules, and finally the Risk Scoring. Once that is done you will need to trigger Grouping. I believe these concepts are covered in the Vulnerability Response Implementation class, but not the details.... which are somewhat complex and implemented in Script Includes.

Hope this helps...

View solution in original post

Alexander36 · ‎10-07-2019

Thank you for your answers. We was just thinking to do the same that @mkemp have explained. We think that is a good solution.