Tenable Vulnerability Management

Tenable Vulnerability Management we only use for agent scans. The setup and administration took a lot of deep understanding of how the product works from deployment and is not very intuitive. When everything works, its great at scanning for vulnerabilities. But when something does not work, it becomes a trial and error scenario. It is like a Russian Doll nightmare to understand the order of how every piece must be setup and functioning. This means that one person will be the subject matter expert and labels can mean absolutely nothing helpful. Another issue is that agent licenses are consumed from the same system grabbing a new IP address via DHCP. This creates a lot of bloated fragmented data, and purging data repositories is practically impossible. From a user and training perspective, many of our users resist using the product to learn about vulnerabilities because they just want the reported data on vulnerabilities to fix. The learning curve and setup takes too much time for them. We also struggle to maintain an accurate asset inventory with real ownership details. When an unmanaged agent is enrolled, there is little information for us to track down who enrolled it.