Introduction

Due to the limitations of the Tenable WAS API and its lack of official support, Vulcan has discontinued the out-of-the-box Tenable WAS integration. This guide provides a workaround for importing Tenable WAS data into Vulcan using the Vulcan Report (ConnectX). By following these steps, you can effectively integrate Tenable WAS data into Vulcan, ensuring continuous monitoring and management of your web application vulnerabilities, even without the direct API support from Tenable.

Note: This guide assumes the user has basic familiarity with both Tenable WAS and Vulcan platforms. If you encounter any issues or have questions, please reach out to Vulcan support at support@vulcan.io.

About Vulcan Report Connector

The Vulcan ConnectX/Report Connector enables you to upload CSV, ZIP, XLS, and xlsx files from SAST/DAST and Vulnerability assessment tools that might not be supported yet by the existing Vulcan Connectors. On top of that, you can use the Vulcan Report Connector to upload Penetration Test files for asset data type Host or Website, depending on PT application type or infrastructure. Once you upload your data file and select the appropriate data type, the relevant mapping table appears on the connector screen. Then, you need to map the Headers in your file to the right Header/Field in the Vulcan Platform.

Steps

Step 1: Export Data from Tenable WAS

In Tenable, navigate to the Findings section and select the Web Application Findings tab.
Toggle to include/exclude Info severity findings and select the required time period of findings
Configure Filters:
- Finding State: Choose 'Active', 'Resurfaced', and 'New'.
- Severity: Select the severity levels you want to include.
- Risk Modify: Set to 'Not equal to Accepted'.
Use the checkbox to select all findings. If there are multiple pages of findings, opt to "select all web application vulnerabilities."
Export Data:
1. Click the 'Export' button.
2. In the panel that appears, select 'CSV' format.
3. Choose the following fields to include in your export:
  - Asset ID
  - Asset Name
  - CVSSv2 base score and vector
  - CVSSv3 base score and vector
  - Family
  - Finding ID
  - First Seen
  - Last Seen
  - Plugin Description
  - Plugin ID
  - Plugin Name
  - Severity
  - Solution
  - VPR,
  - Vulnerability Published

Step 2: Import Data into Vulcan

In Vulcan, navigate to Connectors and then select Add new.
Select Vulcan Report as the connector type.
Give the Connector an indicative name, such as "Tenable WAS Data - January 25".
Click 'browse' to upload the file you exported from Tenable WAS.

Step 3: Configure the data mapping

Data Type: Set to 'Websites (DAST)'.
Fields Mapping: Once you select the Data Type, a dedicated Map Fields configuration is opened. Map out the headers fields in your file (left column) to the respective Vulcan fields (right column). You can also add custom values.
Map the fields as described in the table below:

Tenable WAS Fields	Vulcan Field
asset.display_ipv_address	Asset - Details
asset.id	Asset - Details
asset.name	Asset - Name Asset - URL
definition.cvss2.base_score	Vulnerability - Details
definition.cvss2.base_vector	Vulnerability - Details
definition.cvss3.base_score	Vulnerability - Details
definition.cvss3.base_vector	Vulnerability - Details
definition.description	Vulnerability - Description
definition.family	Asset - Details
definition.id	Vulnerabilities - ID
definition.name	Vulnerability - Name
definition.solution	Solutions - Description
definition.vpr.score	Vulnerabilities - Technical Severity
definition.vulnerability_published	Vulnerabilities - Details
finding_id	Vulnerabilities - Unique Instance ID
first_observed	Vulnerabilities - Discovery Time
last_seen	Vulnerabilities - Details
severity	Vulnerabilities - Details
state	Asset - Details

Step 3: Review and Complete Import

Review the fields and make sure the mapping is correct.
Click Create.It usually takes several minutes for a file to complete the sync. Larger files take longer.

Step 4: Validate the Imported Data

Once the data import is complete, you can start reviewing it in the Vulcan Platform.

Go to Assets > Websites.
Filter by Connector Name to view the relevant assets.
You should expect to see the imported assets and their relevant details.
For example: