Network Management for Tenable.io API
In larger enterprises, you can reduce the time and cost of setting up and maintaining locations by deploying network templates that use identical asset configurations, including internal IP addresses. Tenable.io allows you to create a custom network object for each network template you want to deploy. You can then manage scans for all locations centrally, while analyzing the related assets and vulnerabilities both collectively and by individual location.
Network management introduces new API endpoints and affects existing API endpoints, as described below.
For best practice information related to these API changes, see Manage Networks.
New Endpoints
To support this feature, Tenable.io supports the following new endpoints:
Existing Endpoints
This feature affects the following existing endpoints:
| API Endpoint | Request Msg | Response Msg (200) | |
|---|---|---|---|
| POST /import/assets | network_id attribute not supported in asset object (automatically assigned to default network) | network_id in asset object | |
| GET /editor/{type}/templates/{template_uuid} | -- | network_name in scanner object | |
| POST /exclusions | network_id supported in exclusion object | network_id attribute in exclusion object | |
| GET /exclusions | -- | network_id in exclusion object | |
| POST /exclusions/import | network_id not supported in exclusion object (automatically assigned to default network) | -- | |
| GET /exclusions/{exludsion_id} | -- | network_id in exclusion object | |
| PUT /exclusions/{exclusion_id} | network_id in exclusion object | -- | |
| GET /vulns/export/{export_uuid}/chunks/{chunk_id} | -- | network_id in asset object | |
| GET /assets/export/{export_uuid}/chunks/{chunk_id} | -- | network_id in asset object | |
| GET /scanner-groups | -- | network_name in scanner group object | |
| GET /scanner-groups/{group_id} | -- | network_name in scanner group object | |
| PUT /scanner-groups/{group_id} | -- | network_name in scanner group object | |
| GET /scanner-groups/{group_id}/scanners | -- | network_name in scanner group object | |
| GET /scanners | -- | network_name in scanner object | |
| GET /scanners/{scanner_id} | -- | network_name in scanner object | |
| PUT /scanners/{scanner_id} | -- | network_name in scanner object | |
| POST /vulnerabilities | network_id not supported in asset object (automatically assigned to default network) | -- |