Nessus offline update

Details Description. As new versions of Nessus Agent are released, Nessus Manager becomes aware of them through feed updates, and then passes those updates to the linked Agents. A Nessus Manager registered in offline or air-gapped mode will not become aware of the new Agent versions automatically - manual intervention is necessary to update the Nessus Agent versions. Additional Resources.

Nessus Configuration Tenable. Not finding your answer? Ask our community of users and experts. Ask a question. Number of Views Number of Views 8. Click Reset Activation Code. Tenable devices rely on the underlying operating system they are running on to provide their network stack.

As the network and any security devices can potentially impact this communication with Tenable, it is impossible to cover all possible configurations, however, here are some general guidelines to check: Ensure that the Tenable sites needed for usage are allowed. These are detailed here: Which Tenable sites should I allow? Confirm that you have DNS available to the Tenable device. Name: plugins. It may be that no security device is blocking the connection but there is no valid route for the traffic to arrive.

We use openssl in this example because it lets us also confirm the certificate isn't being modified by SSL decryption or any proxy services. If there are any additional Intermediate CA that seem likely tied to the local organization, it may be that it is operating as a man-in-the-middle.

While trusted by the organization potentially, the Tenable device will not trust it, and this can prevent communication.

It is recommended that the device be allowed from any such security devices. Proxies typically cause this behavior. Confirm the last part shows a Verify return code: 0 ok. If it shows any other type of failure, there is likely something that is preventing the connection from fully being established, either by TCP not being allowed outbound on port , or something blocking SSL specifically.

Firewalls and endpoint security typically cause this behavior. Networking issues between Tenable. Check that the Scanner is showing as online in your Tenable. Log in to Tenable. In the top navigation, click Resources , then Nessus Scanners. Check the status of the scanner.

If the scanner's status is anything other than Updating Plugins or Working : Note: The first time a scanner is updated, it must have the entire plugin database sent to it. When updating Nessus plugins online a number of factors may interfere with the connection; these include but are not limited to the following:.

Please work with your System Administrator to complete the installation of PowerShell. If the file downloads successfully, compare the MD5 hashes as described in this guide. If the MD5 hashes do not match, there may be a Network or host based software altering the file in transit. This ensures the downloaded plugin file is processed by Nessus without error. If there is an error please open a case with Technical Support and note that you followed this guide. Include a screenshot of the error as well as a Nessus Debug report per instructions here.

If all the above steps work without issues please follow the following steps to re-enable online updates in Nessus. Back to tenable. Please login or register here: Self Register.

Ask the Community Instead! Knowledge Article.