Tenable.io web application scanning asset and vulnerabilities import in ServiceNow are not working

[shallumittal]

Dear Experts,

We are facing an issue in web scanning import from Tenable.io into ServiceNow for #Vulnerability Response implementation.

Connection between the Tenable.io and ServiceNow is successful. However, in ServiceNow we are receiving only Nessus agent asset data, Not getting any asset or vulnerabilities for web application scanning. (Source = web scanning)

Kindly advise.

Thanks!

[Dfalcomer]

Hello @kevin_m , can you please explain how you import Tenable WAS scans using a specific process?

I'm waiting for OOTB integration, but there is no release date yet.

[robbav]

Hi,
we are currently importing tenable.io WAS into the App VR module.
Now that the API is available from tenable.io, this process should be easier.

We are currently manually exporting out the WAS vulnerabilities into an excel doc, then importing to the App VR module, specifically form the one excel export , we get the CIs (apps) into the Application [cmdb_ci_appl] table, the vulnerabilities into the Application Vulnerability Entry [sn_vul_app_vul_entry] table, and then create a App VIT in the [sn_vul_app_vulnerable_item] table. 

VR then auto creates the Remediation Tasks from the VITs every import.

[Dfalcomer]

Thanks for the reply @robbav !! We will start develop.