Product overview

This module provides comprehensive guidance on the installation, maintenance, and operation of the IVR v.4 service. It includes a detailed summary of the entire end-to-end workflow for using IVR v.4.

The IVR4 is an advanced solution designed to bridge the gap between vulnerability detection and remediation actions, significantly improving the speed, accuracy, and efficiency of addressing security vulnerabilities. By integrating with Tenable's vulnerability data and BigFix's remediation capabilities, IVR provides a streamlined approach to help organizations rapidly address security risks.

Key features of the IVR v.4 system include:

  • Improved Vulnerability to Remediation Correlation: Traditionally, the correlation between Tenable's vulnerability findings and BigFix's remediation content was based on CVE IDs (Common Vulnerabilities and Exposures), which often resulted in delays and inaccuracies. With the new approach, IVR4 uses a rule-based system that leverages various Tenable plugin attributes, such as the xref type for more precise correlation. Moreover, IVR4 now provides a pre-correlated mapping between Tenable plugins and BigFix Fixlets, updated continuously.

    This enhancement leads to faster and more accurate remediation guidance.

  • Enhanced Asset Correlation: Previously, Tenable assets were matched to devices in BigFix based on IP addresses, MAC addresses, or hostnames. This method often results in issues due to changing IP addresses or devices with multiple network adapters. With the new release, IVR4 can directly leverage the BigFix Asset ID provided by Tenable, improving the accuracy and speed of asset correlation.

    This new method eliminates challenges associated with virtualization and devices that have dynamic or multiple network connections.

  • Reduced Infrastructure Requirements: One of the significant challenges with previous versions of IVR was the need for substantial infrastructure, particularly in larger environments. Customers needed to deploy and maintain both the BigFix Insights component and the IVR Service, which involved additional SQL databases, ETL configurations, and resource management. With the new IVR4 architecture, the IVR service is now decoupled from BigFix Insights entirely, simplifying the deployment process and reducing the overall infrastructure footprint.

    This means faster time-to-value for customers, as well as reduced resource requirements, improved timeliness of data, and lower operational costs.