Nessus 6.4 User Guide July 7, 2015 (Revision 2) Copyright © 2015. Tenable Network Security, Inc. All rights reserved. Tenable Network Security and Nessus are registered trademarks of Tenable Network Security, Inc. SecurityCenter is a trademark of Tenable Network Security, Inc. All other products or services are trademarks of their respective owners. Table of Contents Introduction ........................................................................................................................................................................................ 6 Standards and Conventions ........................................................................................................................................................................................ 6 Official Nessus Product Names ................................................................................................................................................................................. 6 New in Nessus 6.4 .......................................................................................................................................................................................................... 6 Overview .............................................................................................................................................................................................. 7 Installation ........................................................................................................................................................................................... 7 Nessus User Interface (UI) ............................................................................................................................................................ 7 Supported Platforms ..................................................................................................................................................................................................... 7 Connecting to Nessus ................................................................................................................................................................................................... 8 Security Warnings ................................................................................................................................................................................................... 8 Bypassing the SSL Warning ........................................................................................................................................................................... 9 Nessus Top Navigation ................................................................................................................................................................................................. 9 User Profile Settings & Options .............................................................................................................................................................................. 10 User Profile Account Settings ........................................................................................................................................................................... 10 Change Password .................................................................................................................................................................................................. 11 Plugin Rules .............................................................................................................................................................................................................. 11 API Keys .................................................................................................................................................................................................................... 12 API Keys Warnings ......................................................................................................................................................................................... 12 Nessus General Settings ............................................................................................................................................................................................ 12 Scanners .................................................................................................................................................................................................................... 13 Accounts .................................................................................................................................................................................................................... 14 Communication ...................................................................................................................................................................................................... 14 Advanced .................................................................................................................................................................................................................. 16 Scans and Policies .......................................................................................................................................................................... 16 Scan Library and Policy Library ............................................................................................................................................................................... 16 Scanner Templates ................................................................................................................................................................................................ 17 Compliance Specific Templates ................................................................................................................................................................. 18 Mobile Device Specific Template .............................................................................................................................................................. 18 PCI Auditing Specific Templates................................................................................................................................................................ 19 SCAP and OVAL Auditing Specific Template ........................................................................................................................................ 19 Agent Templates .................................................................................................................................................................................................... 20 Scans .................................................................................................................................................................................................................................. 20 Scan Statuses ........................................................................................................................................................................................................... 21 Create a New Scan Folder .................................................................................................................................................................................. 21 Table of Contents: 2 of 151 Create a New Scan................................................................................................................................................................................................. 22 Scan > Settings (Basic Network Scan Example) ................................................................................................................................... 22 Basic .............................................................................................................................................................................................................. 23 Discovery ..................................................................................................................................................................................................... 26 Assessment ................................................................................................................................................................................................. 33 Report ........................................................................................................................................................................................................... 43 Advanced ..................................................................................................................................................................................................... 45 Scan > Credentials (Basic Network Scan Example) ............................................................................................................................ 46 Cloud Services ........................................................................................................................................................................................... 48 Database .....................................................................................................................................................................................................