Prerequisites

Before you can get started with Vulnerability Mitigation App (VMA), you need the following:

• Google Chrome or Mozilla Firefox internet browsers

• Click here for Tufin Orchestration Suite version compatibility. The hardware and software requirements of VMA are identical to those of the TOS version that is installed.

• Obtain from the Marketplace:
  • The latest installer file for the application
  • A license file
• In SecureTrack:
  • Create a user with Security Administrator level permissions. Log into SecureTrack with that user.
  • Configure the relevant network zones
• In SecureChange:
  • Create a user with the permission: Create and handle tickets on behalf of another user (via API only). Log into SecureChange with that user.
  • Create a server decommission workflow to be used when asset mitigation is needed
• Access credentials that can make API calls to one of the following supported vulnerability management solutions:
  • Rapid7 Nexpose
  • Rapid7 InsightVM
  • QualysGuard
  • Qualys VMDR
  • Nessus Professional
  • Tenable.io
  • Tenable.sc