Tenable's Solution Selected for Department of Defense ACAS Pilot

Tenable Network Security was recently selected by the Defense Information Systems Agency (DISA) for the Department of Defense Assured Compliance Assessment Solution (DoD ACAS) pilot. Our partner, HP Enterprise Services, will provide deployment, training, and support for the Tenable solution.

Under the ACAS pilot, multiple DoD and Intelligence agencies will be using Tenable's SecurityCenter, Nessus vulnerability scanner and Passive Vulnerability Scanner for proactive network defense.

Tenable is the market leader in designing, deploying, and operating large-scale vulnerability management systems. Tenable Network Security solutions are utilized in large enterprise environments where clients require scalability and high performance without sacrificing accuracy and ease of use.

User Account Provisioning Activity

Active, Patch and Passive Vulnerability Reporting

• SecurityCenter — the central console that provides continuous asset-based security and compliance monitoring. It unifies the process of asset discovery, vulnerability detection, and configuration auditing for large enterprises, providing a central point for discovering assets, detecting vulnerabilities and data leaks, managing events, and conducting configuration and compliance audits.

Our DISA ACAS solution is designed to scale easily and cost effectively, and leverages the following components:

• Nessus Vulnerability Scanner — the world's most popular vulnerability scanner, with more than five million downloads to-date, including several hundred U.S. Department of Defense (DoD) locations. Each SecurityCenter console can manage over 500 individual Nessus scanners.
• Passive Vulnerability Scanner (PVS) — performs real-time network traffic monitoring. It determines server and client-side applications and vulnerabilities and sends this data to the SecurityCenter in real time. It also uses advanced protocol analysis to log all file sharing, SQL, HTTP, and other types of protocols for analysis.
• X-Tool — converts DISA distributed eXtensible Checklist Configurations Description Format (XCCDF) files into Tenable's Extensible Markup Language (XML) schema, which allows the files to be imported into SecurityCenter and easily customized, if necessary. The X-Tool also imports and converts Open Vulnerability Assessment Language (OVAL) vulnerability files for upload into SecurityCenter.
• Topology Viewer — imports asset data from the Nessus scanner or SecurityCenter and provides graphical analysis information such as network and protocol maps, communication paths, and vulnerability maps.

To learn more about how Tenable can help you move to continuous network assessment and monitoring, please complete the form below.