Tenable

Vulnerability Management

A comprehensive vulnerability management program is the foundation for effective security. In order to secure and protect your network, endpoints, and data with confidence, you need complete visibility of the vulnerabilities that exist, context to determine their relative risk, and a plan of action to remediate them.

Gartner explains that “vulnerability management” is used to indicate the whole lifecycle of processes and multiple technologies that are aimed at reducing IT vulnerabilities and mitigating their impacts. Vulnerability scanning or vulnerability assessment is just one facet of that lifecycle. You also have to figure out the level of risk the vulnerabilities pose, and do something to address the problem.

Continuous Visibility is Essential

Consider your house. It doesn’t matter how secure the lock on your front door is if there is an unlocked side door or ground floor window you don’t even know about. For that same reason, a vulnerability management program can’t be effective if it is only managing some--or even most--of the assets on your network. It’s crucial to be able to also detect new or never-before-seen devices and applications on the network, as well as transient assets like laptops and mobile devices.

Having comprehensive visibility of all of the vulnerabilities that exist in your network only addresses part of the problem, though. You also need to understand the relative risk they pose. While all of the unlocked doors and windows on your house leave you vulnerable to a break-in, the unlocked side door that leads to an empty garage does not pose the same risk as the unlocked window that leads into the master bedroom. When it comes to network and endpoint vulnerabilities, you need to be able to prioritize the vulnerabilities based on the likelihood that they might be exploited, and the potential impact of a successful exploit.

Get a Complete Picture of Risk Across Environments

Tenable delivers unrivaled visibility for customers. Through Nessus audits and supported technologies, Tenable provides more than 76,000 checks that cover nearly 30% more vulnerabilities than competitive solutions across 32% more technologies.

Tenable identifies and monitors transient devices, such as laptops and mobile devices. These devices pose a unique challenge because they can connect or disconnect from the network at any time, making it difficult to examine these devices for vulnerabilities and compliance violations. To address this, Tenable includes mobile device management (MDM) and ActiveSync integrations, enabling you to prevent mobile devices from being a weak link in your vulnerability management program.

Tenable’s passive traffic and event monitoring capabilities also detect and monitor services and applications in use - even in cloud and virtualized environments.

Contact Logi-Tech today to discuss the value that Tenable vulnerability management can bring to your business' IT environment.