SOLUTION OVERVIEW

Tenable and CyberArk Application Access Manager

Automating Credentialed Vulnerability Assessments

Business Challenge
Organizations are constantly challenged with the ability to control, manage andmonitor privileged access to its most valuable assets. Vulnerability scans require
gaining access to and navigating an ever-changing sea of usernames,
passwords and privileges. Without integrating CyberArk and Tenable, managing
credentials becomes increasingly complex and assets could be left at risk
with an alarming increase in the attack surface.

TechnologyComponents• Tenable.io/Tenable.sc 5.4 or higher

Solution• CyberArk Core Privilege
Access Security

The Tenable® integration with CyberArk AAM delivers a comprehensive
authenticated scanning solution that provides security teams better
vulnerability insight in order to further protect privileged accounts. This
integration supports the secure storage and management of privileged
credentials with CyberArk and their automatic retrieval at scan time by Tenable.
This ensures that credentials required to access critical systems are safely
stored, controlled, auditable and easily changed without manual intervention.

• CyberArk Application Access
Manager 9.0.0 or higher

Value
The Tenable integration for CyberArk AAM provides the ability to:• Eliminate risks from decentralized management of privileged oradministrative credentials• Simple management of credentials necessary for vulnerability
management assessments• Meet government and industry compliance rules to account for themanagement of organizational credentials• Fully automated credentialed scanning across your organization

Key Benefits• Automates credential retrieval
at scan time for deeper analysis• Simplifies secure scanning withless management required• Reduces time and effort needed for
credential additions and changes• Reduces the risk of unsecured
privileged accounts and credentials• Improve data accuracy withcredentialed scanning compared tonon-credentialed scanning

SOLUTION OVERVIEWAB OUT T E N AB LETenable®, Inc. is the Cyber
Exposure company. Over 27,000
organizations around the globe
rely on Tenable to understand andreduce cyber risk. As the creatorof Nessus®, Tenable extended
its expertise in vulnerabilities todeliver the world’s first platform tosee and secure any digital asset on
any computing platform. Tenable
customers include more than 50
percent of the Fortune 500, morethan 25 percent of the Global 2000
and large government agencies.
Learn more at www.tenable.com.

AB OUT CY B E R A R K
CyberArk (NASDAQ: CYBR) is theglobal leader in privileged accessmanagement, a critical layerof IT security to protect data,
infrastructure and assets acrossthe enterprise, in the cloud andthroughout the DevOps pipeline.
CyberArk delivers the industry’s
most complete solution toreduce risk created by privileged
credentials and secrets. Thecompany is trusted by the world’s
leading organizations, including
more than 50 percent of theFortune 100, to protect against
external attackers and malicious
insiders. A global company,
CyberArk is headquartered in
Petach Tikva, Israel, with U.S.
headquarters located in Newton,Mass. The company also has
offices throughout the Americas,
EMEA, Asia Pacific and Japan.
Learn more at cyberark.com.

Features
With this integration, you can:• Perform credentialed scans of Windows Hosts• Perform credentialed scans of Unix (SSH) hosts• Perform credentialed scans of databases• For the above credential types this integration supports 1 or more methodsof gathering credentials to be used:◦ For each machine to be scanned get a unique password based on static
username and machine ip/hostname◦ Get a password stored in “secret” this password will be used to login toevery machine in the scan

How It Works
1. Tenable requests a scan of asset(s) using CyberArk AAM credentials
2. Nessus® requests credentials for the asset to be scanned
3. CyberArk AAM provides the credentials for the asset
4. Nessus scans the asset using the provided credentials

2134ASSET

More Information
Installation and configuration documentation:
https://docs.tenable.com/integrations/cyberark_tio/Content/Introduction.htm
https://docs.tenable.com/integrations/cyberark_sc/Content/Introduction.htm
For support please contact: support@tenable.com
COPYRIGHT 2019 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, TENABLE NETWORKSECURITY, NESSUS, SECURITYCENTER, SECURITYCENTER CONTINUOUS VIEW AND LOG CORRELATIONENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. TENABLE.SC, LUMIN, ASSURE, AND THE
CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ALL OTHER PRODUCTS ORSERVICES ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / CyberArk / 2