After installation, Nessus must process the new plugins, which may take 10–15 minutes before they appear in the "Plugin Set" version under the About page. Install Plugins Manually (Tenable Nessus 10.12)
Ensure your Nessus license is active; otherwise, the challenge code will not produce a valid download link.
Specifically, modify the URL: Replace all-2.0.tar.gz with sc-plugins-diff.tar.gz . This file is purpose-built for Security Center deployments. Using the wrong file type will result in a failed update. After downloading sc-plugins-diff.tar.gz , upload it via the Security Center UI under .
: A block of text containing your nessus.license file information. Copy this text and save it to a plain text file named nessus.license .
Follow these steps to obtain the newest plugins for your offline Nessus setup. 1. Generate a Challenge Code download nessusupdateplugins all20targz new
I can provide tailored scripts or specific to streamline your update process. AI responses may include mistakes. Learn more Share public link
If you are setting up this process for the first time, let me know: What your Nessus scanner runs on?
Once you have transferred the all-2.0.tar.gz file to your offline Nessus host (e.g., placing it in /tmp/ or the home directory), follow these precise steps. The command phrase "nessusupdateplugins" directly maps to the tool nessuscli update .
Because your scanner is locked down inside an isolated zone, you must securely move this file across the air gap. Use an approved corporate file transfer system, a data diode, or an encrypted USB drive to copy all-2.0.tar.gz over to the local storage of your offline Nessus machine. Phase 3: Install the New Plugins After installation, Nessus must process the new plugins,
Open your terminal and run /opt/nessus/sbin/nessuscli fetch --challenge .
In the world of vulnerability scanning, keeping your detection capabilities current is paramount. Nessus, developed by Tenable™, relies heavily on its plugins to identify thousands of potential security weaknesses. The file often referred to as "nessusupdateplugins all20targz" or officially known as all-2.0.tar.gz , is the complete offline archive of these plugins. This tar file contains all the newest and updated Nessus plugins, allowing you to manually update a scanner in an air-gapped environment or where an internet connection is restricted. It is the essential method for ensuring your scanner has the latest rules without requiring a live online feed.
To process and unpack the large .tar.gz archive, pass the file directly to the Nessus command-line interface. Do not extract the archive manually using traditional extraction tools like WinZip or standard tar -xvf commands, as Nessus requires its engine to process the database integrity. : /opt/nessus/sbin/nessuscli update /path/to/all-2.0.tar.gz Use code with caution. Windows Installation :
Managing vulnerability scanners in highly secure networks requires a strict offline procedure because the standard online update feed ( plugins.nessus.org ) is completely inaccessible. This file is purpose-built for Security Center deployments
If you tell me your (e.g., RHEL, Windows Server, Ubuntu), I can provide the exact command-line strings for your specific environment.
[Internet-Connected PC] ---> Download Challenge & Key ---> Generate URL | v [Tenable Server] <--------- Download "all-2.0.tar.gz" <----------+ | v [Air-Gapped Nessus] <------ Transfer & Apply Archive 1. Obtain the Challenge Code
Some administrators prefer to stop the Nessus service before major updates.
C:\Program Files\Tenable\Nessus\nessuscli.exe fetch --challenge Access the Custom URL : Visit the Tenable Offline Registration page Enter Credentials : Input your Challenge Code Activation Code
Depending on your hardware specifications (SSD vs. HDD, core count), compilation can take anywhere from 10 minutes to over an hour. Best Practices and Troubleshooting Automation in Air-Gapped Environments