Tenable OT Security 2026 版本说明

提示：您可以订阅以接收关于 Tenable 文档更新的提醒。

Tenable OT Security 4.7.44 (2026-06-23)

企业管理和扩展

Enterprise Manager 的集中式子网管理

OT Security 现在支持通过 Enterprise Manager 进行集中式子网管理，以便 OT 管理员从单个位置定义和管理所有 ICP 的网络边界 (CIDR)。这样就无需单独配置每个 ICP，从而减少管理大量 ICP 的组织的运营开销，并为整个 OT 基础设施的网络配置提供单一可信来源。

  • 通过一个中央界面管理所有 ICP 子网，并可对每个站点进行监控切换。

  • 运行较旧 ICP 版本的站点会显示在管理网格中，并带有明确的升级指示符。

有关更多信息，请参阅“受监控的网络”。

重要基础设施安全

IEC 61850 GOOSE 流可见性和异常检测

OT Security 现在可让用户查看电力公司变电站中使用的 IEC 61850 GOOSE（面向通用对象的变电站事件）消息。GOOSE 消息未经加密和身份验证，因此容易遭受操纵。OT Security 被动监控 GOOSE 流量并生成异常活动警报，以帮助电力公司检测配置更改、重放攻击和潜在的操纵尝试。

  • GOOSE 流表：显示所有被动监控的 GOOSE 流量以及关键消息属性，包括 AppID、源和控制块信息。

  • 专用 GOOSE 流选项卡：在资产详细信息的 IEC 61850 部分下提供集成视图，以及现有的 MMS 报告选项卡。

  • 异常检测：生成配置修订变更 (confRev) 的自动警报，这些警报可能代表存在未经授权的修改或重放攻击。

Yokogawa Centum VP DCS 活动检测

OT Security 现在可检测 Yokogawa Centum VP DCS 系统上的关键操作变更，使安全团队能够了解工程活动，这些活动可能代表进程控制环境中存在未经授权的访问或配置篡改。

检测的活动包括：

  • 控制器启动和停止事件

  • 代码编辑和功能块更改操作

  • 写入和删除标签操作

  • 快照保存和加载操作

  • 步进和暂停事件（在维护时段中出现为预期内；在生产中出现为异常）

适用于断开连接环境的 OT 代理

OT Security 代理

OT Security 代理现在支持在物理隔离或断开连接的 OT 网络中进行扫描。对于因网络分段或合规性要求而无法部署网络传感器的组织，无需直接网络访问权限即可实现资产可见性和漏洞覆盖范围。

  • 物理隔离网络支持：专为传统传感器部署不可行的隔离设施、近海船舶和远程站点而构建。

  • 安全的离线扫描：以断开连接的便携式状态收集和打包发现数据，并将其安全地传输到 ICP，而无需实时连接。

  • 集中式网络区域：一个新实体，通过将资产锚定到其逻辑位置来解决不同站点（例如，相同的工厂车间布局）之间的重复 IP 冲突。

  • 本地代理 UI：现场技术人员用于加载扫描配置文件、跟踪进度和离线运行扫描的本机界面。有关更多信息，请参阅“Tenable OT 代理”。

  • OTD 扫描配置文件：将主动发现规则、凭据和子网捆绑到可下载的扫描配置文件包中，以便进行现场部署。

有关更多信息，请参阅使用便携式 OT 代理进行扫描。

 

用户体验提升

我的保存视图

OT Security 现在允许安全分析师跨资产和发现结果视图保存、命名和重复使用自定义筛选器组合。保存的视图会跨会话留存，因此无需在周期性调查期间进行重复的筛选器配置。

  • 将任何筛选器组合另存为指定型视图，以便即时重复使用。

  • 个人视图会跨会话留存，并且可从任何页面访问。

  • 从任何资产或发现结果页面访问保存的视图。

有关更多信息，请参阅查看保存的筛选器。

Syslog 的 TLS 加密

Syslog 转发现在支持 TLS 加密。

除了现有 TCP 和 UDP 选项以外，Syslog 传输设置中还提供了新的使用 TLS 的 TCP 选项。选择 TLS 时，系统会自动建议使用端口 6514 (RFC 5425)。跳过证书验证切换开关支持使用自签名证书的环境。如果 TLS 连接失败，OT Security 不会回退到明文传输。

漏洞

Tenable 会识别此版本中的多个新漏洞。请在此处查看自 4.6 版本（2026 年 2 月 26 日）发布的插件的完整列表。

新的 OT Security 设备指纹引擎 (DFE) 覆盖范围

供应商 产品
Bosch DINION IP 摄像头
Siemens SENTRON PAC
Phoenix Contact 能量测量设备
Juniper Networks JUNOS 设备
Lantronix 交换机
Crestron Electronics AirMedia 网关
Weidmueller UC20-SL2000 PLC
ORing 工业以太网交换机
SATO 打印机
AVTECH 房间警报监控设备

  • Nessus 插件集：202606220821

  • IDS 威胁检测规则集：202606212238

  • 设备指纹识别引擎 (DFE) 版本：202606221258

错误修复 缺陷 ID
OT Security 现在会在修复资产上的所有漏洞后正确更新扫描结果。 02456800
数据包中不存在 CommandArg 时，OT Security 不再为 Honeywell CeeDigitalOutputChangeMode 生成错误事件。 02454132
当资产 UUID 计数非常大时，ID 筛选器不会再造成浏览器选项卡崩溃。 02407800
OT Security 现可在 BCM57412 网络适配器（bnxt_en 驱动程序）上正确设置混杂模式。 02468422
在重叠的网络环境中，策略发现结果现在会正确显示实际设备 IP 地址，而不是内部映射的 IP (240.x.x.x)。 02412844
OT Security 现在会在发送给 Tenable Security Center 的扫描结果中正确包含已修复的插件，以便 Tenable Security Center 关闭已缓解漏洞的发现结果。 02478735
现在，当关联的发现结果完全解决时，发现结果事件可以得到正确解决。 02459698
OT Security 现在包含禁止从 CIP/EtherNet-IP 有效负载提取 IP 的配置选项，可防止重叠网络环境中不正确的资产合并。 02462535
OT Security 解决了以下问题：因延迟合并最终完成期间的哈希不匹配，通过合并最终完成窗口隐藏的资产错误地重新出现在资产清单中。 不适用
修复了在应用操作系统更新之前通过 Enterprise Manager 将 ICP 升级到 4.7 可能导致 OT Security 服务无法启动的问题。Enterprise Manager 现在可确保在启动 ICP 升级之前应用操作系统更新。 不适用

有关 OT Security API 的更多信息，请参阅“API 文档”。

复制 
Enum value YokogawaDcsPause was added to enum ActivityPolicyEvent
Enum value YokogawaDcsStart was added to enum ActivityPolicyEvent
Enum value YokogawaDcsStep was added to enum ActivityPolicyEvent
Enum value YokogawaDcsStop was added to enum ActivityPolicyEvent
Enum value YokogawaFunctionBlockChange was added to enum ActivityPolicyEvent
Enum value YokogawaSnapshotLoad was added to enum ActivityPolicyEvent
Enum value YokogawaSnapshotSave was added to enum ActivityPolicyEvent
Enum value YokogawaTagWrite was added to enum ActivityPolicyEvent
Enum value ReadOtdScans was added to enum Capability
Enum value WriteOtdScans was added to enum Capability
Enum value OriginNotExist was added to enum ErrorCategory
Enum value ScannedNetworkNotMonitored was added to enum ErrorCategory
Enum value OriginId was added to enum ErrorKey
Enum value Subnet was added to enum ErrorKey
Member GOOSEAnomalyDetails was added to Union type EventDetails
Enum value GOOSE was added to enum ExclusionType
Enum value GOOSEConfRevChange was added to enum IDSSrcDstEvent
Enum value GOOSESqNumMismatch was added to enum IDSSrcDstEvent
Enum value GOOSEStNumMismatch was added to enum IDSSrcDstEvent
Enum value emUpdate was added to enum IcpSensorField
Enum value networkAreaId was added to enum IcpSensorField
Enum value globalDescription was added to enum MonitoredNetworkField
Enum value globalName was added to enum MonitoredNetworkField
Argument networkAreas: [String!] added to field Mutation.editNessusUserScan
Argument networkAreaId: ID added to field Mutation.editOtAgent
Argument networkAreaId: ID added to field Mutation.editSensor
Argument networkAreas: [String!] added to field Mutation.newNessusUserScan
Argument caCert: String added to field Mutation.newSyslogServer
Argument tlsEnabled: Boolean added to field Mutation.newSyslogServer
Argument caCert: String added to field Mutation.setSyslogServer
Argument tlsEnabled: Boolean added to field Mutation.setSyslogServer
Argument networkAreaId: String added to field Mutation.testAdHocBasicCredentials
Argument networkAreaId: String added to field Mutation.testAdHocBasicCredentialsWithRole
Argument networkAreaId: String added to field Mutation.testAdHocPasswordOnlyCredentials
Argument networkAreaId: String added to field Mutation.testAdHocSnmpV2Credentials
Argument networkAreaId: String added to field Mutation.testAdHocSnmpV3Credentials
Argument caCert: String added to field Mutation.testAdHocSyslogServer
Argument tlsEnabled: Boolean added to field Mutation.testAdHocSyslogServer
Argument networkAreaId: String added to field Mutation.testCredentials
Enum value originDescription was added to enum OriginSelectField
Enum value originManaged was added to enum OriginSelectField
Enum value originOtAgents was added to enum OriginSelectField
Enum value originReportedSources was added to enum OriginSelectField
Enum value originSensors was added to enum OriginSelectField
Enum value networkAreaId was added to enum OtAgentSelectField
Enum value reportedNetworkAreaNames was added to enum OtAgentSelectField
Enum value reportedOriginNames was added to enum OtAgentSelectField
Enum value GOOSEConfRevChange was added to enum PolicyEventType
Enum value GOOSESqNumMismatch was added to enum PolicyEventType
Enum value GOOSEStNumMismatch was added to enum PolicyEventType
Enum value YokogawaDcsPause was added to enum PolicyEventType
Enum value YokogawaDcsStart was added to enum PolicyEventType
Enum value YokogawaDcsStep was added to enum PolicyEventType
Enum value YokogawaDcsStop was added to enum PolicyEventType
[12:36 AM]Enum value YokogawaFunctionBlockChange was added to enum PolicyEventType
Enum value YokogawaSnapshotLoad was added to enum PolicyEventType
Enum value YokogawaSnapshotSave was added to enum PolicyEventType
Enum value YokogawaTagWrite was added to enum PolicyEventType
Enum value dstMacs was added to enum PolicyFindingFilterField
Enum value srcMacs was added to enum PolicyFindingFilterField
Enum value GOOSE_CORRUPT was added to enum ProtocolType
Argument networkAreas: [String!] added to field Query.getDiscoveryEstimation
Field networkAreas was added to object type AssetDiscovery
Field AssetDiscovery.origins is deprecated
Input field networkAreas of type [String!] was added to input object type AssetDiscoveryOptionsParams
Directive deprecated was added to input field origins in input object AssetDiscoveryOptionsParams
Type GOOSEAnomalyDetails was added
Type GOOSEAnomalyType was added
Type GOOSEExclusion was added
Type GooseStream was added
Type GooseStreamConnection was added
Type GooseStreamEdge was added
Type IemMonitoredNetwork was added
Type IemMonitoredNetworkConnection was added
Type IemMonitoredNetworkEdge was added
Type IemMonitoredNetworkField was added
Type IemMonitoredNetworksExpressionsParams was added
Type IemMonitoredNetworksSortParams was added
Type IemMonitoredNetworksSortParamsComplexFields was added
Field globalDescription was added to object type MonitoredNetwork
Field globalName was added to object type MonitoredNetwork
Type MonitoredNetworkSiteInfo was added
Field addEmMonitoredNetwork was added to object type Mutation
Field bulkAddEmMonitoredNetwork was added to object type Mutation
Field bulkDeleteOtdScans was added to object type Mutation
Field bulkDisableEmMonitoredNetworks was added to object type Mutation
Field bulkDisableMonitoredNetwork was added to object type Mutation
Field bulkEnableEmMonitoredNetworks was added to object type Mutation
Field bulkEnableMonitoredNetwork was added to object type Mutation
Field createNetworkArea was added to object type Mutation
Field Mutation.createOrigin is deprecated
Field createOtdScan was added to object type Mutation
Field createTcpPortPinning was added to object type Mutation
Field deleteBulkMonitoredNetworks was added to object type Mutation
Field Mutation.deleteMonitoredNetworks is deprecated
Description for argument ids on field Mutation.deleteMonitoredNetworks changed from The ids of monitored networks that will be deleted to The ids of monitored networks
Field deleteNetworkArea was added to object type Mutation
Field deleteNetworkAreasOverlappingNetworks was added to object type Mutation
Field Mutation.deleteOrigin is deprecated
Field deleteOtdScan was added to object type Mutation
Field deleteOtdScan was added to object type Mutation
Field Mutation.deleteOverlappingNetworks is deprecated
Description for argument networks on field Mutation.deleteOverlappingNetworks changed from The networks to be deleted from the origins to The networks to be deleted from the network areas
Field deleteTcpPortPinning was added to object type Mutation
Field downloadOtdScans was added to object type Mutation
Field editEmMonitoredNetwork was added to object type Mutation
Type for argument subnet on field Mutation.editMonitoredNetwork changed from String! to String
Directive deprecated was added to argument subnet of field editMonitoredNetwork in type Mutation
Description for argument credentialsMode on field Mutation.editNessusUserScan changed from Crednetials usage mode for the user scan to Credentials usage mode for the user scan
Directive deprecated was added to argument origins of field editNessusUserScan in type Mutation
Directive deprecated was added to argument origin of field editOtAgent in type Mutation
Field editOtdScan was added to object type Mutation
Directive deprecated was added to argument origin of field editSensor in type Mutation
Field moveSourcesNetworkArea was added to object type Mutation
Field newGOOSEExclusion was added to object type Mutation
Description for argument credentialsMode on field Mutation.newNessusUserScan changed from Crednetials usage mode for the user scan to Credentials usage mode for the user scan
Directive deprecated was added to argument origins of field newNessusUserScan in type Mutation
Field singleDisableMonitoredNetwork was added to object type Mutation
Field singleEnableMonitoredNetwork was added to object type Mutation
Directive deprecated was added to argument origin of field testAdHocBasicCredentials in type Mutation
Directive deprecated was added to argument origin of field testAdHocBasicCredentialsWithRole in type Mutation
Directive deprecated was added to argument origin of field testAdHocPasswordOnlyCredentials in type Mutation
Directive deprecated was added to argument origin of field testAdHocSnmpV2Credentials in type Mutation
Directive deprecated was added to argument origin of field testAdHocSnmpV3Credentials in type Mutation
Directive deprecated was added to argument origin of field testCredentials in type Mutation
Field updateNetworkArea was added to object type Mutation
Field updateNetworkAreasOverlappingNetworks was added to object type Mutation
Field Mutation.updateOverlappingNetworks is deprecated
Field NessusUserScan.credentialsMode description changed from Crednetials usage mode for the user scan to Credentials usage mode for the user scan
Field NessusUserScan.credentialsMode changed type from NessusUserScanCredentialsMode to NessusUserScanCredentialsMode!
Field networkAreas was added to object type NessusUserScan
Field NessusUserScan.origins is deprecated
Type NetworkArea was added
Type NetworkAreaConnection was added
Type NetworkAreaEdge was added
Type NetworkAreaExpressionsParams was added
Type NetworkAreaSelectField was added
Type NetworkAreaSortParams was added
Type NetworkAreaSortParamsComplexFields was added
Input field NetworkUpdateInput.network description changed from The network to be added or removed from the origins to The network to be added or removed from the network areas
Input field networkAreas of type [ID!] was added to input object type NetworkUpdateInput
Input field NetworkUpdateInput.oldNetwork description changed from The network to be replaced from the origins to The network to be replaced from the network areas
Directive deprecated was added to input field origins in input object NetworkUpdateInput
Field Origin.nessus description changed from Discovery queries the origins is used in to Nessus user scans the origin is used in
Field Origin.queries description changed from Discovery queries the origins is used in to Discovery queries the origin is used in
Field Origin.supportActive description changed from If the origin support for querying assets to If the origin supports querying assets
Field networkArea was added to object type OtAgentDetails
Field OtAgentDetails.origin is deprecated
Field reportedNetworkAreaNames was added to object type OtAgentDetails
Type OtdScan was added
Type OtdScanConnection was added
Type OtdScanEdge was added
Type OtdScanProfile was added
Type OtdScanSelectField was added
Type OtdScansExpressionsParams was added
Type OtdScansSortParams was added
Type OtdScansSortParamsComplexFields was added
Field dstMacs was added to object type PolicyFinding
Field srcMacs was added to object type PolicyFinding
Directive deprecated was added to argument origins of field getDiscoveryEstimation in type Query
Field gooseStreamsByAssetId was added to object type Query
Field iemMonitoredNetworks was added to object type Query
Field iemMonitoredNetworksRaw was added to object type Query
Field networkArea was added to object type Query
Field networkAreas was added to object type Query
Field networkAreasRaw was added to object type Query
Field Query.origin is deprecated
Field Query.origins is deprecated
Field otdScan was added to object type Query
Field otdScanProfile was added to object type Query
Field otdScanProfiles was added to object type Query
Field otdScans was added to object type Query
Field otdScansRaw was added to object type Query
Field tcpPortPinnings was added to object type Query
Type RawIemMonitoredNetworksComplexFieldParams was added
Type RawIemMonitoredNetworksComplexFieldParamsComplexFields was added
Type RawIemMonitoredNetworksComplexGroupingParams was added
Type RawIemMonitoredNetworksComplexGroupingParamsComplexFields was added
Type RawNetworkAreaComplexFieldParams was added
Type RawNetworkAreaComplexFieldParamsComplexFields was added
Type RawNetworkAreaComplexGroupingParams was added
Type RawNetworkAreaComplexGroupingParamsComplexFields was added
Type RawOtdScansComplexFieldParams was added
Type RawOtdScansComplexFieldParamsComplexFields was added
Type RawOtdScansComplexGroupingParams was added
Type RawOtdScansComplexGroupingParamsComplexFields was added
Field networkArea was added to object type SensorDetails
Field SensorDetails.origin is deprecated
Type SiteInfoInput was added
Type Source was added
Field caCert was added to object type SyslogServer
Field tlsEnabled was added to object type SyslogServer
Type TcpPortPinningRule was added
Type TcpPortPinningRuleConnection was added
Type TcpPortPinningRuleEdge was added
Type UnsignedInt was added

文件名和 MD5 或 SHA-256 校验和已发布在“OT Security 下载”页面。

Tenable OT Security 4.6.34 (2026-04-16)

Core 基础设施和扩展性

大规模子网扩展：OT Security 现在支持多达 5,000 个子网，可适应大规模的企业部署。此更新可提高被动检测和入侵检测系统 (IDS) 检测的精细度。这种可见性可确保不会在达到架构限制的情况下监控复杂的网络环境。

集中式受监控子网管理：OT Security 现在包含新的“受监控的网络”页面，可帮助您管理受监控的网络。

  • 批量操作：批量添加子网以减少手动配置时间。

  • 精细控制：在创建期间切换各个子网的监控状态。

  • 非活动子网：在列表中创建和管理子网，但无需启用监控功能。

    有关更多信息，请参阅“受监控的网络”。

主动扫描和漏洞管理

Nessus 扫描凭据管理：OT Security 现在提供更灵活的主动扫描工作流，允许您在配置 Nessus 扫描时定义特定的凭据用途：

  • 不使用凭据：在不提供凭据的情况下执行扫描。

  • 尝试所有可用凭据：使用所有可用凭据，以确保最大程度地提高覆盖范围。

  • 仅使用特定凭据：为高敏感度资产选择有针对性的凭据。

有关更多信息，请参阅“创建 Nessus 插件扫描”。

生态系统和集成

顺畅的 Tenable One 导航：通过 Tenable One 单点登录 (SSO) 或 SAML 访问 OT Security，其中现在包含“返回 Tenable One”链接。使安全分析人员能够在平台之间无缝切换，而无需重新进行身份验证。

维护和诊断

ICP 远程代理更新：允许直接从 ICP 远程更新 OT 代理。

如此一来，在部署最新的 OT 代理更新时，就可以减少对本地站点访问或手动干预的需求。有关更多信息，请参阅“更新 OT 代理”。

增强资产诊断：“资产诊断导出”现包含更深层次的元数据和精细资产信息，可为 Tenable 支持和工程团队提供更全面的快照，用于故障排除和资产验证。

Enterprise Manager 中的 ICP-Access 系统日志

通过 OT Security EM 访问 ICP 仪表盘时，OT Security 在 ICP 上生成系统日志。

OT 代理 - 协议和查询限制基础设施

OT Security 现在支持对 OT 代理设置查询限制。

错误处理框架改进

OT Security 现在改进了系统稳定性，并为后端流程提供了具体的错误消息。

用户界面更新

OT Security 4.6 版本包含用户界面更新，可提高数据密度和可读性。

IoT 连接器改进

OT Security 现在包含以下 IoT 连接器改进：

  • IoT 连接器状态：状态指示器现在可以准确反映集成运行状况。

  • 数据检索：IoT 代理现在可将数据返回到 OT Security，以进行 AvigilonES、Exacq Edge 和 Milestone 集成。

  • 连接失败：OT Security 可确保在 AvigilonES、Exacq Edge 和 Milestone 集成的连接失败时，集成返回空值。

  • 性能改进：OT Security 不仅可以更高效地处理大型 Milestone 集成，而且还能确保您可以同时运行多个集成。

  • 数据库身份验证：使用 MSSQL 数据库的 Windows 身份验证（IoT 代理）现在可以正常工作。

  • 设备匹配：改进了从 Avigilon 获取通用 ONVIF 设备时的制造商匹配机制。

漏洞

Tenable 会识别此版本中的多个新漏洞。请在此处查看自 4.5 版本（2025 年 12 月 18 日）发布的插件的完整列表。

新的 Tenable OT Security 设备指纹引擎 (DFE) 覆盖范围

供应商产品
StarlinkStarlink 第三代卫星接收器
SchneiderTriconex 安全系统
Tripp LiteSmartOnline UPS
SiemensPower Meters 9000
CUE SystemsIPCUE 控制器
Honeywell工业打印机
Konica MinoltaBizhub 多功能打印机
Printonix热敏标签打印机
HP IncLaserJet/DesignJet
Wachendorff Automation网关/WebPanel
Schneider Electric旧 Modicon 系列
Jinan USRUSR 串口转 WiFi 转换器
EndRun TechnologiesSonoma 网络时间服务器
TryStarCyTime SER（序列事件记录器）

  • Nessus 插件集：202604140952

  • IDS 威胁检测规则集：202604052238

  • 设备指纹识别引擎 (DFE) 版本：202601252235

错误修复缺陷 ID
Siemens S7-1500 固件 2.9.4 上的状态或快照查询现在可正常工作。不适用
Yokogawa Stardom 固件现在可显示正确的值。02397709
OT Security 在 Nessus 扫描中禁用了插件 14788，以防止与 ICP 相关的传感器通道发生故障。不适用

有关 OT Security API 的更多信息，请参阅“API 文档”。

复制
Type DetailedPolicyFindingField was removed
Input field PolicyFindingsExpressionsParams.field changed type from DetailedPolicyFindingField to PolicyFindingFilterField
Input field PolicyFindingsSortParams.field changed type from DetailedPolicyFindingField to PolicyFindingFilterField
Input field PolicyFindingsSortParamsComplexFields.field changed type from DetailedPolicyFindingField to PolicyFindingFilterField
Input field RawPolicyFindingsComplexFieldParams.field changed type from DetailedPolicyFindingField to PolicyFindingFilterField
Input field RawPolicyFindingsComplexFieldParamsComplexFields.field changed type from DetailedPolicyFindingField to PolicyFindingFilterField
Input field RawPolicyFindingsComplexGroupingParams.field changed type from DetailedPolicyFindingField to PolicyFindingFilterField
Input field RawPolicyFindingsComplexGroupingParamsComplexFields.field changed type from DetailedPolicyFindingField to PolicyFindingFilterField
Enum value VersionMismatch was added to enum CannotUpdateDfeReason
Enum value VersionMismatch was added to enum CannotUpdatePluginSetReason
Enum value VersionMismatch was added to enum CannotUpdateSuricataRulesReason
Enum value ReadMonitoredSubnets was added to enum Capability
Enum value TOneLinks was added to enum Capability
Enum value WriteMonitoredSubnets was added to enum Capability
Enum value Cip1768Backplane was added to enum ConnectionType
Enum value EmptyMonitoredNetwork was added to enum ErrorCategory
Enum value UpdateUnavailable was added to enum ErrorCategory
Argument credentials: [ID!] added to field Mutation.editNessusUserScan
Argument credentialsMode: NessusUserScanCredentialsMode added to field Mutation.editNessusUserScan
Argument allowAutoInstallUpdates: Boolean! (with default value) added to field Mutation.editOtAgent
Argument credentials: [ID!] added to field Mutation.newNessusUserScan
Argument credentialsMode: NessusUserScanCredentialsMode added to field Mutation.newNessusUserScan
Enum value RollbackUpdate was added to enum OtAgentAction
Enum value autoInstallUpdates was added to enum OtAgentSelectField
Enum value scoutAvailableVersion was added to enum OtAgentSelectField
Enum value scoutBackupAvailable was added to enum OtAgentSelectField
Enum value scoutBackupVersion was added to enum OtAgentSelectField
Enum value scoutCheckedForUpdatesTs was added to enum OtAgentSelectField
Enum value scoutUpdatedTs was added to enum OtAgentSelectField
Argument policyEligible: Boolean added to field Query.assetGroups
Field Asset.lastSnapshot description changed from Latest time of the last snapshot made on the asset to The time of the last snapshot change detected on the asset
Type AssetLayoutSection was added
Field OtAgentAutoUpdate was added to object type Config
Type DisplayName was added
Field otAgentUpdateAvailable was added to object type FlagList
Field LeanAsset.lastSnapshot description changed from Latest time of the last snapshot made on the asset to The time of the last snapshot change detected on the asset
Type MonitoredNetwork was added
Type MonitoredNetworkCategory was added
Type MonitoredNetworkConnection was added
Type MonitoredNetworkEdge was added
Type MonitoredNetworkField was added
Type MonitoredNetworksExpressionsParams was added
Type MonitoredNetworksSortParams was added
Type MonitoredNetworksSortParamsComplexFields was added
Field addMonitoredNetwork was added to object type Mutation
Field bulkAddMonitoredNetwork was added to object type Mutation
Field deleteMonitoredNetworks was added to object type Mutation
Field disableMonitoredNetwork was added to object type Mutation
Field editMonitoredNetwork was added to object type Mutation
Field enableMonitoredNetwork was added to object type Mutation
Field logRemoteConnection was added to object type Mutation
Field credentials was added to object type NessusUserScan
Field credentialsMode was added to object type NessusUserScan
Type NessusUserScanCredentialsMode was added
Field autoInstallUpdates was added to object type OtAgentDetails
Field scoutAvailableVersion was added to object type OtAgentDetails
Field scoutBackupAvailable was added to object type OtAgentDetails
Field scoutBackupVersion was added to object type OtAgentDetails
Field scoutCheckedForUpdatesTs was added to object type OtAgentDetails
Field scoutUpdatedTs was added to object type OtAgentDetails
Type PolicyFindingFilterField was added
Field monitoredNetworks was added to object type Query
Field monitoredNetworksRaw was added to object type Query
Field scoutBinaryStatus was added to object type Query
Type RawMonitoredNetworksComplexFieldParams was added
Type RawMonitoredNetworksComplexFieldParamsComplexFields was added
Type RawMonitoredNetworksComplexGroupingParams was added
Type RawMonitoredNetworksComplexGroupingParamsComplexFields was added
Type ScoutBinaryStatus was added                            

文件名和 MD5 或 SHA-256 校验和已发布在“OT Security 下载”页面。

Tenable OT Security 4.5.61 SP (2026-03-06)

所有 OT Security 4.5 的用户必须升级到 4.5 Service Pack，以解决严重影响系统稳定性和策略事件的问题。当系统使用依赖包含数千个资产的动态资产组的事件策略处理大量网络对话时，便会出现此问题。

错误修复缺陷 ID
处理大量的并发网络对话（以使用动态资产组的事件策略作为评估标准）时，OT Security 可确保系统稳定性。02420590 02429400
OT Security 现在会正确地从 4.2.33 升级到 4.5.54，而不会出现任何内存错误。02410077
Rockwell Stratix 设备现在可正确显示 Cisco IOS 或交换机固件版本（通过 SNMP）而不是 CIP 固件版本。02259051
如果在之前更新的过程中触发了新的更新，Tenable OT Security Enterprise Manager (EM) 更新将不再累积，也不会导致系统错误。不适用
使用 SNMP v3 凭据进行的 Nessus 扫描现在可正常工作。02410044
OT Security 现在可确保 syslog 文件包含重复网络的正确 IP 地址。不适用