Forum Discussion
Tenable vCenter Integration: Report Active and Inactive...
Tenable vCenter Integration: Report Active and Inactive Virtual Machines
Summary
Tenable has introduced a new option to the VMware vCenter API credential called “Report Active and Inactive Virtual Machines”, which is an optional toggle.
Change
Prior to this change, the integration would always collect information about active and inactive virtual machines, regardless of auto-discovery settings. These virtual machines would be listed in the output of the “VMware vCenter Active Virtual Machines” (84340) and “VMware vCenter Inactive Virtual Machines” (84341) plugins. The new UI field allows for this collection to be disabled. The default value of this option is “on”, which is consistent with the integration’s behavior prior to this change.
Impact
For credentials found in Tenable Vulnerability Management scan configuration, the value may be “off” for existing scans. For other configurations, the value should be “on” by default so that scan behavior is completely unchanged.
Though this change does not affect vulnerability findings but instead only informational-level output, we nevertheless encourage customers to check their scan configuration and ensure that the setting is set according to their preference.
Release Date
Nov 13, 2024 for TVM and Nessus
TBD for SC
10 Replies
We're past the release date, but I don't see this yet in TVM?
Hello Adam,
There may have been a slight delay in the update, our apologies of any inconvenience. We have confirmed this feature is in TVM at this time. There is a new toggle switch bellow the "Use Auto Discovery" toggle switch, within "Credentials" .
Thanks for replying, Harry.
I still don't see it. I've selected to add a new VMware vCenter API credential but there is no toggle below the 'use auto discovery' one for me. Maybe I just need to wait a bit longer. We're on the US-1A container.
Adam, thank you for the screen shot. I'm currently investigating why you are unable to see the changes.
Hi Adam,
Thank you for your patience while I looked into this issue. Please check again if you can now see the new feature. If not please open a ticket with our Customer Support staff so we can dedicate the appropriate resources to your issue.
Hi Harry,
I've been away but now I'm back I see that we now have this option, so I guess it was just a delay in the rollout.
However, I note that it is set to 'off' on my existing credentials saved in scans, not on by default as your post suggests. Thought I would bring that to your attention.
Regards,
Adam.
