SecurityCenter 4.2 and Community Dashboard Site Released
Note: Tenable SecurityCenter is now Tenable.sc. To learn more about this application and its latest capabilities, visit the Tenable.sc web page.
Tenable Network Security is proud to announce the immediate availability of SecurityCenter 4.2. SecurityCenter is used to centralize and report on system and event data such as vulnerabilities, logs, NetFlow, configurations and more.
With SecurityCenter, multiple users and organizations can securely leverage Nessus scanners to perform distributed scans and system audits, Passive Vulnerability Scanners sniffing network traffic 24x7 and multiple Log Correlation Engines gathering logs from thousands of devices.
Sharing system and event data pervasively and securely across enterprise networks is a key component of Tenable's Unified Security Monitoring platform.
SecurityCenter 4.2 includes hundreds of updates based on feedback from Tenable's enterprise user community. The major features of SecurityCenter 4.2 include:
New Dashboard Types and Community Dashboards
SecurityCenter 4.2 includes a new "matrix" dashboard component, which is a live spreadsheet that can be hooked directly to logs, vulnerabilities and many other types of data. Examples are shown below:
|
Password Audit Results by Asset
|
Inbound and Outbound IDS Event,
|
|
Vulnerability Trending by Asset, Including |
|
These matrix components allow a tremendous amount of security, compliance, vulnerability and user activity information to be communicated to senior management and technical users.
Tenable has also established the following site to host hundreds of Tenable and user generated dashboards for sharing with the entire community of organizations that rely on SecurityCenter for their compliance and security monitoring needs. Posts are organized by compliance type (PCI, FISMA, etc.), security function (patch auditing, intrusion detection, etc.) and many other categories.
Many SecurityCenter users already interact with Tenable and other SecurityCenter users on the Tenable Discussions Forum. The Forum is an ideal place to share dashboards, filter tips and ideas for managing a wide variety of security and compliance information.
New Report Logic and Filtering
SecurityCenter also includes new reporting functions that allow even more detailed and high-level reports to be created in less time.
If the hundreds of default report templates for PCI, SANS CAG, OWASP or FISMA are not sufficient, SecurityCenter 4.2 users can now automatically "iterate" any report across a discrete list of IP addresses, user IDs, assets and ports.
In addition, report data can now be filtered on by specific groups of assets, by the compliance auditing results from specific Nessus .audit policy used in the scan, by the specific CVE or Microsoft bulletin and many other items.
Three new chapters are also included in the reporting templates to summarize all matching CVEs, all matching Microsoft bulletins and all software found by credentialed patch audits of Unix or Windows systems.
To Learn More
Tenable is in the process of producing several new webinars, white papers, blog entries and videos that introduce SecurityCenter. It is recommended that all existing SecurityCenter customers read the release notes on the Tenable Support Portal to learn how they can upgrade. If you are interested in contacting Tenable's sales team to learn more about SecurityCenter, please email us at [email protected].
Related Articles
Unified IT and Web App Security: On-Prem Web App Scanning Integrated into Security Center
October 17, 2023On-prem web app scanning is now available within Tenable Security Center, offering comprehensive exposure management with accurate analysis, OWASP Top 10 coverage and easy setup. Here’s what you need to know.
What Is VPR and How Is It Different from CVSS?
April 16, 2020This blog series will provide an in-depth discussion of vulnerability priority rating (VPR) from a number of different perspectives. Part one will focus on the distinguishing characteristics of VPR th...
Tenable Releases SecurityCenter Continuous View
August 9, 2012<p>Today, Tenable <a href="http://www.tenable.com/news-events/press-releases/2012-tenable-network-security-unveils-securitycenter-continuous-view" target="_self" title="Tenable Network Security Unveils SecurityCenter Continuous View">announced </a>the availability of a new edition of SecurityCenter, called Continuous View.</p> <p>This edition of SecurityCenter uniquely encompasses both scanning and monitoring, with the inclusion of Tenable's Passive Vulnerability Scanner (PVS). That makes SecurityCenter Continuous View uniquely capable of addressing vulnerability, configuration, and compliance management requirements for emerging technologies like mobile devices, cloud-based services, social applications, and virtual systems.</p> <p>The flexible licensing approach provided by SecurityCenter Continuous View allows enterprise customers to deploy PVS in much the same way as they do with Nessus within SecurityCenter, pretty much as many as needed.</p> <p>Existing SecurityCenter customers can upgrade to a ContinuousView license and begin to enjoy the benefits of continuous monitoring with PVS. These include:</p> <ul> <li>Real-time identification of server and client vulnerabilities </li> <li>Identification of mobile devices and their vulnerabilities </li> <li>Passive discovery of all internal and external web servers and databases </li> <li>Identification of trust and communication paths </li> <li>Passive monitoring of virtual environments </li> </ul>
Active Directory Under Attack: Five Eyes Guidance Targets Crucial Security Gaps
November 21, 2024A landmark global report from cybersecurity agencies emphasizes 17 attack techniques against Microsoft Active Directory and cautions organizations to step up protections. In the first of our two-part series, we offer five steps you can take today to shore up your AD defenses.
Five Cyber Agencies Sound Alarm About Active Directory Attacks: Beyond the Basics
November 21, 2024A landmark global report emphasizes 17 attack techniques against Microsoft Active Directory and cautions organizations to step up protections. In the second of our two-part series, we take you beyond the basics to highlight three key areas to focus on.
Volt Typhoon: What State and Local Government Officials Need to Know
November 19, 2024Increased activity from the state-sponsored threat group Volt Typhoon raises concerns about the cybersecurity of U.S. critical infrastructure. Here’s how you can identify potential exposures and attack paths.
- SecurityCenter