SOLUTION OVERVIEW

Tenable.ot for Aruba

Business Challenge
Unlike IT networks, industrial control systems (ICS) lack visibility, securityand control.
OT networks do not have security features embedded and with increased
threats targeting industrial environments, they are extremely vulnerable
to attacks. Additionally, most of the devices on your network don’t requireauthentication, making it virtually impossible to prevent unauthorized accessor changes to critical devices. Moreover, as the Industrial Internet of Things (IIoT)
continues to gain adoption in industrial and critical infrastructure environments,
new devices are constantly coming online. Without the proper security andaccess control, they can introduce unacceptable risk into your network.

Solution
Tenable.ot provides full visibility of—and safety across—your industrial network.
By combining Tenable.ot’s advanced threat detection, asset and vulnerability
management—both at the network and device level, along with Aruba Networks
ClearPass Access Control—the joint solution delivers complete visibility,
security and control, across your IT and OT environments. This includes
traditional Windows-based systems, Macs and mobile devices, as well asOT devices such as industrial controllers (PLCs, RTUs, DCS controllers).
If you rely on ClearPass
to provide visibility
and control for your ITenvironments, you can
now get visibility on yourOT networks with the same
granularity, policies andworkflow. This enables
you to effectively detectand mitigate threats tothe safety, reliability andcontinuity of your IT andOT converged environment.

TechnologyComponents• Tenable.ot• Aruba Networks ClearPass

The Challenge• Lack of a comprehensive view acrossyour entire industrial infrastructure• Inability to detect and mitigate
threats impacting your IT and OTenvironments• No situational awareness into who
accesses restricted assets or theoperations they perform• No automated OT asset discovery
and inventory management

Key Benefits• End-to-end visibility and security
for OT networks• Automated asset discovery
and management• Continuous validation of asset
configurations• Access control and audit trail
based on job role or authority• Improved incident response
and threat mitigation

SOLUTION OVERVIEWAB OUT T E N AB LE
Tenable®, Inc. is the Cyber
Exposure company. Over 30,000
organizations around the globe
rely on Tenable to understand andreduce cyber risk. As the creatorof Nessus®, Tenable extended
its expertise in vulnerabilities todeliver the world’s first platform tosee and secure any digital asset on
any computing platform. Tenable
customers include more than 50
percent of the Fortune 500, morethan 30 percent of the Global 2000
and large government agencies.
Learn more at www.tenable.com.

AB OUT A RU BA ,AN HP COM PA N Y
Aruba, a Hewlett Packard
Enterprise company, is a leading
provider of secure, intelligent
networks that enable customers tothrive and deliver amazing digital
experiences in the mobile, IoT
and cloud era. We are changing
the rules of networking to makeit simple for IT and organizations
to bridge the physical and digitalworlds at the Edge.

Key Components
Managing IT and OT Assets in Industrial Networks
Since industrial networks lack access controls, new unmanaged connected
devices can potentially introduce threats into these sensitive environments. Lack ofautomated asset discovery and management is also at the root of many operational
incidents resulting from contractors, integrators or employees working on the wrong
assets. Such incidents can result in severe operational disruptions. In addition, anunmanaged asset inventory is harder to support and maintain since it’s not always
clear which assets you should upgrade or patch, or which spare parts you need.

Detecting Threats to Operational Environments
As more and more industrial networks connect to corporate environments and cloudsolutions, their risk exposure profile increases. Since OT environments are different
from IT environments and use different proprietary protocols, IT security solutions likefirewalls and intrusion detection solutions (IDS) are inadequate for threat detection.
NAC systems and other IT visibility tools are not effective across your OT environment
because you cannot use agents on OT devices and IT scanning tools can make OT
unstable. In addition, critical control devices lack event logs, so event tracing isnearly impossible.

Validating Configurations and Managing Changes
Controller configuration settings directly impact the industrial processes they
manage. Any unauthorized change to the configuration logic or firmware can result
in severe disruptions and damaged equipment.
Without a backup of past configurations and proper access controls that validate theoperator’s identity, it is difficult to ensure authorized work and it is not possible torestore a controller to a previously known good configuration after an incident.
The Tenable.ot and Aruba ClearPass solution provides visibility, security and access
control to your IT and OT devices within industrial networks thereby reducing youroverall cyber exposure and mitigating unacceptable risk.

More Information
For support please contact: support@tenable.com

COPYRIGHT 2020 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, TENABLE NETWORKSECURITY, NESSUS, SECURITYCENTER, SECURITYCENTER CONTINUOUS VIEW AND LOG CORRELATIONENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. TENABLE.SC, TENABLE.OT, LUMIN, INDEGY,ASSURE, AND THE CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ALL OTHERPRODUCTS OR SERVICES ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / Aruba / 2