SOLUTION OVERVIEW

Tenable for ARCON

Automating Credentialed Vulnerability Assessments

Business Challenge
Organizations are constantly challenged with the ability to control, manageand monitor privileged access to its most valuable assets. Vulnerability scansrequire gaining access to and navigating an ever-changing sea of usernames,
passwords and privileges. Without integrating ARCON | Privileged Access
Management and Tenable, managing credentials becomes increasingly
complex and assets could be left at risk with an alarming increase in theattack surface.

Solution
The Tenable® integration with ARCON | Privileged Access Managementdelivers a comprehensive authenticated scanning solution that provides
security teams better vulnerability insight in order to further protect
privileged accounts. This integration supports the storage of privileged
credentials in ARCON | Privileged Access Management and their automatic
retrieval at scan time by Tenable. This ensures that sensitive passwords aresafely stored, controlled, auditable and easily changed withoutmanual intervention.

Value
The Tenable integration for ARCON | Privileged Access Management provides
the ability to:• Eliminate risks from decentralized management of privileged oradministrative credentials• Simple management of credentials necessary for vulnerability
management assessments• Meet government and industry compliance rules to account forthe management of organizational credentials• Fully automated credentialed scanning across your organization

TechnologyComponents• Tenable.io• ARCON | Privileged Access
Management Account 4.8.5.0

Key Benefits• Automates credential retrieval
at scan time for deeper analysis• Simplifies secure scanning withless management required• Reduces time and effort needed for
credential additions and changes• Reduces the risk of unsecured
privileged accounts and credentials• Improves compliance with regulation
requiring management of credentials• Improve data accuracy withcredentialed scanning compared tonon-credentialed scanning

SOLUTION OVERVIEWAB OUT T E N AB LETenable®, Inc. is the Cyber
Exposure company. Over 27,000
organizations around the globe
rely on Tenable to understand andreduce cyber risk. As the creatorof Nessus®, Tenable extended
its expertise in vulnerabilities todeliver the world’s first platform tosee and secure any digital asset on
any computing platform. Tenable
customers include more than 50
percent of the Fortune 500, morethan 25 percent of the Global 2000
and large government agencies.
Learn more at www.tenable.com.

Features
With this integration, you can:• Perform credentialed scans of Windows Hosts• Perform credentialed scans of Unix (SSH) hosts• For each machine to be scanned get a unique password based on static
username and machine ip/hostname

How It Works
1. Tenable requests a scan of asset(s) using ARCON | Privileged Access 		
Management credentials

2. Nessus® requests credentials for the asset to be scanned
3. ARCON | Privileged Access Management provides the credentials for the asset

AB OUT ARCO N
ARCON is a leading information
technology company specialized
in risk control solutions. It offers
a proprietary unified governanceframework, which addresses
risks across various technology
platforms. In the last decade,
ARCON has been at the forefrontof innovations in risk control
solutions, with its roots strongly
entranced in identifying businessrisk across industries. It is in aunique position to react with
innovative solutions and products.
Learn more at arconnet.com

4. Nessus scans the asset using the provided credentials

2

1

3

4

ASSET

More Information
Installation and configuration documentation:
https://docs.tenable.com/integrations/arcon/Content/welcome.htm
For support please contact: support@tenable.com

COPYRIGHT 2019 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, TENABLE NETWORKSECURITY, NESSUS, SECURITYCENTER, SECURITYCENTER CONTINUOUS VIEW AND LOG CORRELATIONENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. TENABLE.SC, LUMIN, ASSURE, AND THE
CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ALL OTHER PRODUCTS ORSERVICES ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / ARCON / 2