Deploying and Using the Application

Configure the Data Connector

To use the Infoblox SOC to Tenable integration a source and destination for the data connector is required. Perform the following steps to configure the Data Connector.

1. On the Infoblox CSP highlight on Manage, click on Data Connector in the revealed list

2. On the Data Connector tab, use BloxOne Cloud Source as the Source Type.

3. On the Data Connector tab, click on the Destination Configuration tab on the top of the Data Connector Page.

4. Create destination configuration based on the following steps.

   1. Enter a Name for the configuration.
      

      

   2. Select the Application Script for Tenable Integration and configure the desired Variables for Authentication and Integration.

      1. Variables

         • cspInstance

         • cspApiKey

         • tenableAccessKey

         • tenableSecretKey

         • tenableTemplateName

         • tenableScannerName
           

           

   3. Enable the destination by changing State to Enabled.
      

      

5. Click on the Traffic Flow Configuration tab located near the top of the Data Connector page. Then, click the Create button to create a new Traffic Flow configuration.

6. In the Create Traffic Flow Configuration screen, the details below are to be filled out.

   1. Enter the Name and description of the configuration. Enable the configuration by toggling the State to Enabled.
      

      

   2. Select BloxOne Cloud Source as the Source of Log Source Configuration and select Internal Notifications Log as the Log Type for Source Configuration.
      
      

      

   3. Expand the Destination Configuration list by clicking on the Destination Configuration header. Then, select the destination that was created earlier in this guide from the drop-down list.
      

      

   4. Expand the Service Instance list by clicking on the Service Instance header. Then, select the created Data Connector service from the list. Click on Finish to confirm the creation of the Traffic Flow

Configuring Tenable parameters

1. To generate tenableAccessKey and tenableSecretKey:

   1. Log in to Tenable: Go to your Tenable instance and log in with your credentials.

   2. Navigate to API Keys:

      1. Click on your profile icon in the top-right corner.

      2. Select "My Profile" or "API Keys" from the dropdown menu.

   3. Generate API Keys:

      1. Click on "Generate" or "Create API Key".

      2. Note down the Access Key (tenableAccessKey) and Secret Key (tenableSecretKey). Store them securely as the secret key will be shown only once.
         
         

         

2. To find tenableTemplateName:

   1. Log in to Tenable: Go to your Tenable instance and log in with your credentials.

   2. Navigate to Scans:

      1. Go to the "Scans" tab.

      2. Click on "New Scan".

   3. Select a Template:

      1. Browse through the available templates.

      2. Note down the name of the template you wish to use (e.g., Basic Network Scan).
         
         

         

3. To find tenableScannerName:

   1. Log in to Tenable: Go to your Tenable instance and log in with your credentials.

   2. Navigate to Scanners:

   3. Go to the "Scans" tab.

   4. Click on "Tools > Manage Sensors" in the sidebar or sub-menu.

   5. Select a Scanner from the available list