Integration with tenable SC using IVR4

1

tenable 1
tenable 11598×895 172 KB

Hi,

I am trying to integrate BigFix with Tenable SC using IVR4. I have successfully completed all steps until the Tenable SC API Credentials configuration. I obtained the Tenable Access and secret key and copied the Tenable SC URL, using both the IP address and name, but both attempts failed and gave me an error stating, “Network response was not OK. Unauthorized.”

I tried accessing both URLs (https://name:port and https://IP:port), and both opened successfully as a red arrow pointing.

Can you please advise on what might be wrong in this situation?

2

I Don’t see this page on the IVR 4 section - I’ve looked into the IVR documentation - Tenable.SC API Requirements - API requirements for Tenable.sc

Please make sure you got the right permissions on Tenable. please update if it helped you

3

Were you able to log in to Tenable.sc with the API credentials you’re trying to use?

The ‘Unauthorized’ message indicates you are reaching the Tenable.SC service, but that the credentials are not valid or not allowed.

4

Hi orbiton,

5

It does not tell you which permissions you need to set on the Tenable.SC side.
please look in the documentation I’ve provided

6

I already opened the URL and opened tenable login using username and password, not using Access and Secret Key (API credentials) , and if must login with API credentials how can I test it

7

One of the Tenable admins creates access and secret keys with his account. I will share with them this link and see what will they say?

1 Like
8

Amazing :slight_smile: please update

9

I reviewed the link you sent; I found it related to IVR 2 and 3, not IVR 4. Also, for IVR4, it must be administrator, not auditor. so which one I should follow

10

I think if the documentation is not clear about the subject and you think you have done all of the steps correctly - Please open Support Case with HCL so they can resolve the issue and update the documentation occurdanly.

To troubleshoot the Unauthorized issue - You will need to understand which API calls are being made to Tenable from the IVR application , and from there it will be resolved by HCL & Tenable Support

11

We use the ‘export’ API for both vulnerabilities and assets, and I believe (although open to correction) that this requires the Administrator role/permission in Tenable.

This happens to be Tenable.IO

https://cloud.tenable.com:443 "POST /assets/export

1 Like
12

Hello @madel.1982,

You need administrator user role:

Note: It is required to use the administrator user role within Tenable to enable the generation of API keys used by IVR to maintain the interface with Tenable. Additionally, please note that the BigFix API credentials must have master operator permissions.
Source: IVR v.4 setup process

Using your Tenable SC API Keys, are you able to access this resource (/system):
https://docs.tenable.com/security-center/api/System.htm

For example, using the curl command and entering your API keys and Tenable SC server name, do you get a response for the following resource:

curl -X GET -k --header "x-apikey: accesskey=XXXXXXXXXXXXXX; secretkey=XXXXXXXXXXXXXX" https://Your_TenableSC_Server/rest/system

For more details, please see: API Key Authorization (SC API)

Thanks, Gus.

1 Like