Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Plugin Family Summary

by Andrew Freeborn
August 17, 2016

Plugin Family Summary Report

All organizations have different and unique combinations of software and hardware in the environment. Software such as operating systems and office productivity suites are common across different organizations, but may still have different versions. With most software and hardware in use in an organization, vulnerabilities are present in one way or another. The best way to remediate a vulnerability is to first detect the vulnerability.

When analysts have accurate information of what vulnerabilities are present in the environment with Tenable products, they can take knowledgeable action to remediate vulnerabilities or mitigate the risk. This report can be used as a method to ensure that analysts are able to maintain situational awareness of vulnerabilities. The report displays information from all Tenable Nessus and Tenable Nessus Network Monitor (NNM) plugin families.

The products offered by Tenable are capable of analyzing many types of software and hardware. As a result, there are many plugin families covering a great deal of different types of software and hardware grouped by a common theme, such as “Windows: Microsoft Bulletins”. There are currently over 60 plugin families between Nessus and NNM. The plugins within each family detect and evaluate information using both active scanning and passive listening approaches. Having these two methods of detection and evaluation helps organizations to be constantly aware of vulnerabilities in the environment.

Since a great deal of information is returned in this report, the first 10 results are presented for each plugin family. Analysts can reconfigure the returned results to better reflect the needs of the organization. Additionally, appropriate scans need to be in place for this report to be completely effective.

Active scans performed with Nessus and passive listening performed with NNM benefit the organization in unique and important ways. When analysts assess the network with Nessus, active scans are used to identify systems and software across the network. With active scanning and Nessus Agents, analysts obtain thorough and detailed information for each system. Depending on the organization, Nessus scans need to be set up to include all plugin families to populate this report. Analysts can choose to configure multiple scans with different plugin families to best suit the needs of the organization.

NNM provides actionable and detailed information about the network. When NNM is able to passively collect information at appropriate network locations, analysts benefit from concise knowledge derived from the network traffic inspection. The plugins within the NNM plugin families can populate this report with potentially never before seen information about the network.

Once Nessus and NNM are properly configured to scan and listen to the environment with all plugin families, analysts will see insightful and relevant information about their environment. Results feed into this report as well as many other dashboards, reports, and ARCs available within Tenable.sc. The dashboards, reports, and ARCs provide information necessary for increased situational awareness of vulnerabilities. This report can provide a great high-level insight into the environment helping analysts stay more vigilant with more information of the environment.

This report is available in the Tenable.sc Feed, a comprehensive collection of dashboards, reports, Assurance Report Cards, and assets. This report can be easily located in the Tenable.sc Feed under the category Executive. The report requirements are:

  • Tenable.sc 5.4
  • Nessus 8.6.0
  • NNM 5.9.0

Tenable's Tenable.sc provides continuous network monitoring, vulnerability identification, and security monitoring. Tenable.sc is continuously updated with information about advanced threats and zero-day vulnerabilities, and new types of regulatory compliance configuration audit files. Tenable constantly analyzes information from our unique sensors, delivering continuous visibility and critical context, enabling decisive action that transforms your security program from reactive to proactive. Active scanning examines the devices on the systems, running processes and services, configuration settings and services, and additional vulnerabilities. Continuously listening to the network with passive sensors for servers, desktops, and applications helps prioritize security efforts to mitigate threats and weaknesses. Organizations continue to operate with more mobile and transient network devices and need to have a system in place that continuously monitors traffic, devices, applications, and communications across environments. Tenable enables powerful, yet non-disruptive, continuous monitoring of the organization to ensure accurate and up-to-date information is presented on existing vulnerabilities discovered within the network.

This report contains the following chapters:

  • Executive Summary: This chapter provides a broad overview of the vulnerabilities associated with software and hardware in the organization
  • Plugin Family Summary: This chapter lists all of the plugin families available with Nessus and NNM

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.

Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.

Tenable Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

100 assets

Choose Your Subscription Option:

Buy Now

Try Tenable Web App Scanning

Enjoy full access to our latest web application scanning offering designed for modern applications as part of the Tenable One Exposure Management platform. Safely scan your entire online portfolio for vulnerabilities with a high degree of accuracy without heavy manual effort or disruption to critical web applications. Sign up now.

Your Tenable Web App Scanning trial also includes Tenable Vulnerability Management and Tenable Lumin.

Buy Tenable Web App Scanning

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

5 FQDNs

$3,578

Buy Now

Try Tenable Lumin

Visualize and explore your exposure management, track risk reduction over time and benchmark against your peers with Tenable Lumin.

Your Tenable Lumin trial also includes Tenable Vulnerability Management and Tenable Web App Scanning.

Buy Tenable Lumin

Contact a Sales Representative to see how Tenable Lumin can help you gain insight across your entire organization and manage cyber risk.

Try Tenable Nessus Professional Free

FREE FOR 7 DAYS

Tenable Nessus is the most comprehensive vulnerability scanner on the market today.

NEW - Tenable Nessus Expert
Now Available

Nessus Expert adds even more features, including external attack surface scanning, and the ability to add domains and scan cloud infrastructure. Click here to Try Nessus Expert.

Fill out the form below to continue with a Nessus Pro Trial.

Buy Tenable Nessus Professional

Tenable Nessus is the most comprehensive vulnerability scanner on the market today. Tenable Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy a multi-year license and save. Add Advanced Support for access to phone, community and chat support 24 hours a day, 365 days a year.

Select Your License

Buy a multi-year license and save.

Add Support and Training

Try Tenable Nessus Expert Free

FREE FOR 7 DAYS

Built for the modern attack surface, Nessus Expert enables you to see more and protect your organization from vulnerabilities from IT to the cloud.

Already have Tenable Nessus Professional?
Upgrade to Nessus Expert free for 7 days.

Buy Tenable Nessus Expert

Built for the modern attack surface, Nessus Expert enables you to see more and protect your organization from vulnerabilities from IT to the cloud.

Select Your License

Buy a multi-year license and save more.

Add Support and Training