# Tenable

## About This Document

This guide details the steps necessary to connect Tenable to the Epiphany Intelligence Platform. The Epiphany Intelligence Platform leverages data from tools such as Tenable to provide greater visibility into the risks in your environment.

## **Overview**

### Cloud-Based vs. On-Prem Tenable Environment

Your Tenable environment may have your Tenable data residing on your local servers, or it may be in the cloud. The instructions for integrating Tenable with Epiphany vary slightly depending on your installation: 

* If your Tenable data resides in the cloud, you are using Tenable.io. You will be setting up a *cloud-based* data source in Epiphany. 
* If your Tenable data resides on your local servers, you are using Tenable.sc. You will be setting up an *on-prem* data source in Epiphany. In Epiphany, the major difference is that in addition to creating a data source, you also have to set up a site collector. 

The instructions for both are similar and differences are called out in the instructions. 

### Viewer Access to Tenable

Tenable allows API access by virtue of an API key, which can be created in the management console by an individual user. The permissions granted to the API key will be limited to those of the user associated to that key.

Epiphany only requires viewer access to Tenable, which is one of the default roles within the system.

There are two options to accomplish this; either method is acceptable:

* **Option 1**: Create a new user, designated for use by Epiphany, and generate an API key.
* **Option 2**: Leverage an existing user and follow the steps to generate an API key.

## **Version Compatibility**

* **Epiphany:** Epiphany collector version 1.0 and later.
* **Tenable.io or Tenable.sc API:** 
  * Tenable.io API version ? 
  * Tenable.sc API version ?

## **Prerequisites**

* [ ] Access to the Tenable management console.
* [ ] Ability to create a user, or access to an existing user with the role of viewer.

## **What is Needed for Integration**

* [ ] The username from which the API key was created.
* [ ] The URL of the Tenable appliance.
* [ ] The API key itself. This includes an Access Key and a Secret Key.