Vulnerability Management: Tenable Agent Safe Mode

Documentation is now available for a new endpoint added to the Tenable Vulnerability Management API to support the new Tenable Agent safe mode feature. The new Get agent safe mode summary endpoint returns a summary of agents in safe mode for your container. The summary includes the total number of agents along with breakdowns by agent version and operating system platform.

📘
Note
Agent safe mode is supported by agent version 10.9.0 and later.

For example, the following is an example summary response from the new endpoint:

{
    "container_uuid": "38a0a9a9-a9a9-a9a9-a9a9-a9a9e3dd6de6",
    "user_uuid": "146ec3c3-c3c3-c3c3-c3c3-c3c3482289e5",
    "site": "na-accounts",
    "agent_safe_mode_count": {
        "total": 16,
        "by_version": {
            "10.8.3": 16
        },
        "by_platform": {
            "DARWIN": 8,
            "WINDOWS": 8
        }
    },
    "time_stamp": 1742490770244
}

This information is helpful for self-remediating agents that are in safe mode or providing troubleshooting information to Tenable Support.

Additionally, the List agents, Get agent details, and Rename agent endpoints now include the following new response properties:

Response Property	Data Type	Description
`safe_mode`	Integer	The numeric representation of the agent's safe mode status. `0` indicates that safe mode is disabled and any value greater than `0` indicates that safe mode is enabled.
`last_safe_mode`	Integer	A Unix timestamp that indicates the last time safe mode was enabled.

For general information about agent safe mode, see Safe Mode in the Tenable Agent User Guide. For information about monitoring and recovering agents in safe mode via Tenable Vulnerability Management, see Agent Safe Mode in the Tenable Vulnerability Management User Guide.

📘Note

📘
Note