New Nessus MDM Integration: MobileIron
Nessus now supports the MobileIron mobile device management (MDM) platform. This new support complements Nessus' existing MDM platform support for Apple Profile Manager, Microsoft Exchange via Active Directory, and Good Technology Good for Enterprise.
Tenable and MobileIron customers will be able to connect their Nessus scanners to their Software as a Service (SaaS) or on-premises MobileIron installations and receive mobile operating system (OS) vulnerability information for up to 8,000 enrolled Apple and Android devices. The ability to pull mobile device vulnerabilties is critical to understanding the risks Bring Your Own Devices (BYOD) poses to your organization.
MobileIron Background
MobileIron provides a complete MDM solution for managing applications, content, and the devices themselves. It is available as an on-premises appliance (physical or virtual) and in the cloud in a SaaS model.
The MobileIron platform takes advantage of two techniques for managing devices from multiple vendors:
- Mobile applications that leverage a device's MDM capabilities
- A secure gateway (MobileIron Sentry) for devices that do not have modern MDM capabilities
Setting Up Nessus with MobileIron
Under the Policies tab, click "New Policy" and choose "Mobile Device Scan":
Enter a policy name, and click "Next". Select "MobileIron" from the "Device managers" list, and fill in the required details.
Note: The user provided must have permission to access the API, which can be granted through the MobileIron web-based administration console.
Below is a sample of the output:
Resources
- Detecting Mobile Device Vulnerabilities Using Nessus
- Nessus 5 and Mobile Device Scanning
- Troubleshooting Nessus' New MobileIron Integration
Special thanks to Alex Weber for his contribution to this post.
Related Articles
Cybersecurity Snapshot: 6 Best Practices for Implementing AI Securely and Ethically
May 31, 2024Like many organizations, yours is likely using AI – or at least thinking about deploying it soon. But how can you ensure you use it securely, responsibly, ethically and in compliance with regulations? Check out best practices, guidelines and tips in this special edition of the Tenable Cybersecurity Snapshot!
Taking IBM QRadar SIEM One Step Further Using Tenable.ad
September 30, 2021If you can't continuously monitor Active Directory, it's impossible to achieve full visibility into your evolving attack surface. Here's how combining Tenable.ad with IBM QRadar can help. It's no sec...
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- Integrations
- Mobile Security
- Nessus
- Plugins