SOLUTION OVERVIEW

Tenable for Thycotic Secret Server

Automating Credentialed Vulnerability Assessments

Business Challenge
Organizations are constantly challenged with the ability to control, manageand monitor privileged access to its most valuable assets. Vulnerability scansrequire gaining access to and navigating an ever-changing sea of usernames,
passwords and privileges. Without integrating Thycotic Secret Server andTenable, managing credentials becomes increasingly complex and assets
could be left at risk with an alarming increase in the attack surface.

SolutionThe Tenable® integration with Thycotic Secret Server delivers acomprehensive authenticated scanning solution that provides security
teams better vulnerability insight in order to further protect privileged
accounts. This integration supports the storage of privileged credentials inThycotic Secret Server and their automatic retrieval at scan time by Tenable.
This ensures that sensitive passwords are safely stored, controlled, auditableand easily changed without manual intervention.

Value
The Tenable integration for Thycotic Secret Server provides the ability to:• Eliminate risks from decentralized management of privileged oradministrative credentials• Simple management of credentials necessary for vulnerability
management assessments• Meet government and industry compliance rules to account forthe management of organizational credentials• Fully automated credentialed scanning across your organization

TechnologyComponents• Tenable.io or Tenable.sc 5.5 or higher• Thycotic Secret Server Version 10.4
or higher

Key Benefits• Automates credential retrieval
at scan time for deeper analysis• Simplifies secure scanning withless management required• Reduces time and effort needed for
credential additions and changes• Reduces the risk of unsecured
privileged accounts and credentials• Improves compliance with regulation
requiring management of credentials• Improve data accuracy withcredentialed scanning compared to
non-credentialed scanning

SOLUTION OVERVIEWAB OUT T E N AB LETenable®, Inc. is the Cyber
Exposure company. Over 27,000
organizations around the globe
rely on Tenable to understand andreduce cyber risk. As the creatorof Nessus®, Tenable extended
its expertise in vulnerabilities todeliver the world’s first platform tosee and secure any digital asset on
any computing platform. Tenable
customers include more than 50
percent of the Fortune 500, morethan 25 percent of the Global 2000
and large government agencies.
Learn more at www.tenable.com.

Features
With this integration, you can:• Perform credentialed scans of Windows Hosts• Perform credentialed scans of Unix (SSH) hosts• For the above credential types this integration supports 1 or more methods ofgathering credentials to be used:◦ For each machine to be scanned get a unique password based on static
username and machine ip/hostname◦ Get a password stored in “secret” this password will be used to login toevery machine in the scan

How It Works1. Tenable requests a scan of asset(s) using Thycotic Secret Server credentials

AB OUT T H YCOT I C
Thycotic, a global leader in IT
security, is the fastest growing
provider of Privilege Managementsolutions that protect anorganization’s most valuableassets from cyber-attacks andinsider threats. Thycotic securesprivileged account access for morethan 7,500 organizations worldwide,
including Fortune 500 enterprises.
Thycotic’s award winning Privilege
Management Security solutions
minimize privileged credential risk,
limits user privileges and controls
applications on endpoints andservers. Thycotic was founded in
1996 with corporate headquartersin Washington, D.C. and global
offices in the U.K. and Australia.
For more information, please visit
thycotic.com
Learn more at thycotic.com

2. Nessus® requests credentials for the asset to be scanned
3. Thycotic Secret Server provides the credentials for the asset
4. Nessus scans the asset using the provided credentials

21

3

4

ASSET

More Information
Installation and configuration documentation:
https://docs.tenable.com/integrations/PDFs/Integration_Guide-Tenable.io_
Thycotic.pdf
https://docs.tenable.com/integrations/PDFs/Integration_Guide-SC_Thycotic.pdf
For support please contact: support@tenable.com
COPYRIGHT 2019 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, TENABLE NETWORKSECURITY, NESSUS, SECURITYCENTER, SECURITYCENTER CONTINUOUS VIEW AND LOG CORRELATIONENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. TENABLE.SC, LUMIN, ASSURE, AND THE
CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ALL OTHER PRODUCTS ORSERVICES ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / Thycotic Secret Server / 2