ACAS detailed REVIEW 2024

ACAS • The ACAS product suite is ANSWER-a commercial-off-the-shelf solution from Tenable Network Security, which can detect known Cyberthreats to Air Force enterprise assets. Agent-less Scalable Solution Network Discovery Compliance Reporting Why is ACAS Important? ANSWER---The only DISA approved Vulnerability Scanning tool --USCYBERCOM Tasking Order 17- 0019 – Assured Compliance Assessment Solution (ACAS) Operational Guidance --Identifies a wide variety of vulnerabilities for your base --Identifies computers, servers, printers, switches, routers and IP phones on your base --Allows for a graphical view of your vulnerabilities for leadership ACAS Components ANSWER---ACAS components: Tenable SecurityCenter Nessus Scanners --One SecurityCenter per MAJCOM and two Nessus Scanners per site --Each Nessus Scanner can handle a Maximum of 2500 IPs --Nessus scanners can be physical or virtual What is an Organization? ANSWER---Primary object within SecurityCenter used to group users and assign resources and permissions --Air Force Organizations are grouped by base location Ex. Ramstein Organization, Langley Organization Scan Zones ANSWER---Defines the IP ranges associated with the scanner along with organizational access --SecurityCenter allows defined Organizations to be configured with two different scan zone mo