IVR Setup for Tenable

Usage and Config Insights
1

Am I reading the IVR docs for Tenable correctly?

For .sc, it uses user/pass, not an API key?

FWIW, our 10.0.7 fixlets indicate that IVR 2.0.2 is to be installed.

2

Connecting to Tenable.io (cloud-based) uses an API key, but for .sc (on-prem) it looks like there are backend security requirements for the Tenable user (access to specific assets, and read-only permissions).

3

My Tenable counterpart was rather puzzled that the .sc route needs a user/pass instead of an API key. He was assuming he’d create the latter.