Creating an extended integration for Tenable.io assets

Integrate Tenable.io with Oomnitza to gain visibility of asset security status.

Key information about assets, such as security protection level, exposure level, and scan information, is synced with Oomnitza.

Create workflows that use Oomnitza integration points to perform actions in Tenable, such as adding and updating assets, managing asset tags and fetching scan information. Surface key information in operational dashboards and create scheduled reports to share knowledge with your colleagues.

This integration leverages the List Assets API. For further information, see Tenable.io Developer Documentation: List Assets.

Information

Before you can create the user integration with Oomnitza, you need to have completed the steps in Adding your Tenable credentials to Oomnitza.

Creating the asset integration

1. In Oomnitza, click Configuration> Integrations> Overview.
2. Click Block view
3. Scroll down to the Extended section for asset integrations.
4. Click NEW INTEGRATION.
5. Select the integration in the sidebar.
6. Click ADD.

Integration details overview

More information is provided about the following fields to help you complete the integration:

Installation type

Select Cloud if you want to store credentials in the Oomnitza cloud.

Select Local if you want to store credentials locally. Local extended integrations do not support AWS and OAuth authentication. If you want to sync Oomnitza with vendor applications that require AWS or OAUTH authentication, select Cloud.

Integration preferences

By default, the option Create & Update option is selected. Select this option  when you want to edit records and add new records. If you want to edit records and not add new records, select Update Only. If you only want to add new records, select Create Only.

Integration details

To review or update the integrations details, click Edit .

1. Update the integration name if necessary. 
2. Select an installation type.
3. For integration preferences, select an option.
4. Enter the name of the integration user.

Credential details

If you selected Cloud as the installation type, choose one of the following options:

• Select the credentials that were created for the integration.
• Edit the credentials that were created for the integration.
• Create new credentials

Schedule

By default, data is streamed to Oomnitza once every day.

You can configure the schedule to meet your needs such as changing the interval or changing the time so that the data is streamed when your system isn't busy.

1. Click the Edit .
2. Configure your schedule.
3. Click Update.

Mappings

To map the fields to Oomnitza, click Edit .

You can define rules for your integration by selecting Edit integration on the mapping page. For example, you may only want to run the integration if a certain contact or region exists. See Filtering integration results.  
You can add new fields to your integration by selecting Add new field   on the mapping page. All you need to do is specify the property name. See Creating custom API fields. 

Creating custom mappings

Map the Tenable fields to Oomnitza fields and create custom mappings to get the information that you need to manage your assets.

Complete the following actions:

1. Click SMART MAPPING.
2. To create workflows, you must map the Tenable ID field to Oomnitza. Complete these steps:
3. Click the down arrow on the Tenable Id field.
4. Select Add new Oomnitza assets field.
5. Change the name of the label to, for example, Tenable Device ID.
6. Select the Unique checkbox.
7. Click CREATE.
8. Select the mapped field as the sync key.    

You might want to change the labels of the following mapped fields:

• First Seen to First Seen Date
• Last Seen to Last Seen Date

To change the labels, complete these steps:

1. Click the down arrow on the field.
2. Deselect the mapped field and select Add new Oomnitza assets field.
3. Change the name.
4. Select DateTime as the data type.
5. Click CREATE.

 Learn more about mapping

Custom Tenable to Oomnitza mappings

Agent Name
AWS EC2 Name
Connector Sync Time
Exposure Confidence Value
First Seen
FQDN
Has Agent
Hostname
Id
IPV4
IPV6
Last Scan Target
Last Seen
MAC Address
Netbios Name
Operating System
Security Protection Level
Security Protections

Launching the integration

Your integration is in Draft mode until the required mandatory fields are added. When added, click Launch to activate your integration. 

If you selected Cloud as the installation type when creating the integration, see Running an extended integration

If you selected Local as the installation type when creating the integration, see Running an extended integration locally.

Viewing data ingested by Oomnitza

Viewing ingested asset data

For asset integrations, click Hardware. If the asset integration also ingests software data, click Software.

Viewing ingested user data

For user integrations, click People. If you chose the option to ingest User and SaaS user data, click Software > SaaS, click the SaaS app, and then click the Users tab. 

Related Links

• Running an extended integration
• Troubleshooting integrations
• Mapping extended integrations

Unleash the power of Oomnitza

Unleash the power of Oomnitza

To get valuable actionable insights that help you manage your assets, learn how to:

• Configure dashboards for your users and software
• Configure custom reports about your users and software
• Create workflows to automate tasks

See Getting started for more information.