---
title: "Deploying and Using the Application"
canonical: "https://docs.infoblox.com/space/DeploymentGuideIPAMTDwithTenable/1297812815/Deploying%20and%20Using%20the%20Application"
format: markdown
---
To enable the integration, you’ll need both **destinations** and **traffic flows**. After deploying the integration from the Ecosystem Portal, these components are automatically populated.

**Steps to Deploy the Tenable Integration**

1. **Access the Ecosystem Portal**:  
Log in to the Infoblox CSP.
2. **Navigate to the Integration Marketplace**:
  - Go to **Configure** in the top menu.
  - Click on **Administration**.
3. From the list, select **Integration Marketplace**.
  
4. **Deploy the Integration**:  
You will be redirected to the Infoblox Marketplace. Locate the integration name, and click **Deploy** to add it to your Infoblox portal.

Once deployed, the integration script will appear in the **Automation** tab of the Data Connector.


## Configure the Data Connector

To use the Integration of Infoblox IPAM and Threat Defense with Tenable a source and destination for the data connector is required. Perform the following steps to configure the Data Connector.

1. On the Infoblox CSP highlight on **Configure, click** on **Administration > Data Connector** in the revealed list


![image-20240911-101341.png](media://9a5ebb93-20df-4d75-9af9-0342493a1401)


2. On the Data Connector tab, use Infoblox Cloud Source as the Source Type.


![image-20240911-101530.png](media://838fb352-c8d9-4210-960a-da0456fb719f)


3. **Destination Configuration **:- On the Data Connector tab, click on the **Destination Configuration** tab on the top of the Data Connector Page.


![image-20240911-101728.png](media://38fe6896-0b56-49b9-a8cb-78871f59fd73)


> ℹ️ There should be three destination configurations: one for the scheduler , one for the event handler and other for fetching scan results from Tenable. The scheduler handles the bulk import of data from Infoblox to Tenable during the initial sync, ensuring the data between both systems is aligned. After the initial sync, the event handler takes over, managing any new device creations or updates by syncing them to Tenable in real-time.


![image-20250313-044729.png](media://29434929-e747-4e72-9d9d-bc9bead9abd0)

- Select the destination that is automatically populated for the Integration of Infoblox IPAM and Threat Defense with Tenable, as displayed in the Ecosystem Portal and configure the desired **Variables** for Authentication and Integration.
  - Variables
    - bulkExportWaitTime: *(Default: 1)* This parameter ensures the completion of a full sync bulk export before proceeding to the next operation.
    - cspInstance
    - cspApiKey
    - tenableAccessKey
    - tenableSecretKey
    - tenableTemplateName
    - tenableScannerName
      
- Enable the destination by changing **State** to Enabled.
  

4.**Traffic Flow Configuration**

It is required to have three traffic flows

- **Scheduler**:  Triggers based on Cron job
- **Events**: Triggers based on Events
- **Results:  **It automates the retrieval, monitoring, and storage of vulnerability scan results.
  

1. Click on the **Traffic Flow Configuration** tab located near the top of the Data Connector page. The traffic flow is also auto-populated upon deployment. It’s recommended to verify the traffic flow settings
  
  1. **Scheduler Traffic Flow: **
    - Select the Integration and enable the configuration by toggling the **State** to Enabled.
    - Select **Schedule Source** as the Source of Log Source Configuration with desired cron job, it is recommended to configure the cron to run on daily basis.
    - Expand the Destination Configuration list by clicking on the Destination Configuration header. Then, select the destination that was created earlier in this guide from the drop-down list
    - Expand the **Service Instance** list by clicking on the Service Instance header. Then, select the created Data Connector service from the list. Click on **Finish** to confirm the creation of the Traffic Flow.
  2. **Event Handler Traffic Flow: **
    1. Select the Integration and enable the configuration by toggling the **State** to Enabled.
      
    2. Select Infoblox Cloud Source as the Source of Log Source Configuration and select Audit Logs, Threat Defense Threat Feeds Hits Log and DDI DHCP Lease Log
      
    3. Expand the Destination Configuration list by clicking on the Destination Configuration header. Then, select the destination that was created earlier in this guide from the drop-down list.
      
    4. Expand the **Service Instance** list by clicking on the Service Instance header. Then, select the created Data Connector service from the list. Click on **Finish** to confirm the creation of the Traffic Flow
  3. **Result Traffic Flow:**
    1. Enable the configuration by toggling the **State** to Enabled.
    2. Select **Schedule Source** as the Source of Log Source Configuration with desired cron job, it is recommended to configure the cron to run on hourly basis due to potentially long scan completion times.
      
    3. Expand the Destination Configuration list by clicking on the Destination Configuration header. Then, select the destination that was created earlier in this guide from the drop-down list.
      
    4. Expand the **Service Instance** list by clicking on the Service Instance header. Then, select the created Data Connector service from the list. Click on **Finish** to confirm the creation of the Traffic Flow.

> 📝 It is recommended to enable event traffic 24 hours after the scheduler traffic flow is activated. The scheduler traffic flow is responsible for syncing all data from IPAM to Tenable, and the time required for this process depends on the volume of objects. To ensure the sync is completed successfully, it's advisable to allow a 24-hour buffer period before enabling event traffic.

## Configuring Tenable parameters

1. **To generate tenableAccessKey and tenableSecretKey:**
  1. Log in to Tenable: Go to your Tenable instance and log in with your credentials.
  2. Navigate to API Keys:
    1. Click on your profile icon in the top-right corner.
    2. Select "My Profile" or "API Keys" from the dropdown menu.
  3. Generate API Keys:
    1. Click on "Generate" or "Create API Key".
    2. Note down the Access Key (tenableAccessKey) and Secret Key (tenableSecretKey). Store them securely as the secret key will be shown only once.
      
2. **To find tenableTemplateName:**
  1. Log in to Tenable: Go to your Tenable instance and log in with your credentials.
  2. Navigate to Scans:
    1. Go to the "Scans" tab.
    2. Click on "New Scan".
  3. Select a Template:
    1. Browse through the available templates.
    2. Note down the name of the template you wish to use (e.g., Basic Network Scan).
      
3. **To find tenableScannerName:**
  1. Log in to Tenable: Go to your Tenable instance and log in with your credentials.
  2. Navigate to Scanners:
  3. Go to the "Scans" tab.
  4. Click on "Tools > Manage Sensors" in the sidebar or sub-menu.
  5. Select a Scanner from the available list