The Nessus vulnerability scanner products are annual subscription-based products sold through a sales partner or directly through the online Tenable Store. In addition to the Nessus vulnerability scanner line, Tenable also offers Securit圜enter, a unified network monitoring and vulnerability management analytics control center, and Securit圜enter Continuous View, a monitoring product with real-time threat detection. Administrators can run a host of preconfigured reports or customize them for their environments, and configure the tool to send targeted email notifications for scan results, remediation actions and more. The Nessus console interface and dashboard is designed for ease of use, enabling administrators to create policies with a few mouse clicks. All Nessus vulnerability scanner products work with the RESTful API to integrate Nessus into an organization's overall workflow. Nessus Cloud and Nessus Manager easily integrate with CyberArk for credential management, with patch management systems such as those from Dell, IBM, Microsoft and Red Hat, and with mobile device management systems like those from AirWatch, MobileIron, Apple, Microsoft and others. The agents also allow Nessus to scan the devices for malware. Administration and managementĪdministrators of Nessus Cloud and Nessus Manager can deploy endpoint agents, which allow for offline scanning and the collection of scan results when a mobile device reconnects to the corporate network. Nessus does not include penetration testing capabilities, but administrators can integrate Nessus scan results with popular penetration testing tools, such as Metasploit, Core IMPACT and Immunity CANVAS, to provide insight into risk without the need for exploitation.

Because new vulnerabilities appear nearly every day, customers receive daily plug-in feeds to stay current. Tenable pushes plug-ins that contain the latest information to customer systems within 24 hours after a vulnerability has gone public. The Nessus scanning engine uses plug-ins to detect new vulnerabilities. The Nessus vulnerability scanner family also provides malware detection, auditing of control systems such as SCADA and embedded devices, and configuration auditing and compliance checks. In addition to vulnerability scanning of the infrastructure with automatic scan analysis for remediation prioritization, Nessus includes web application, cloud environment and mobile device scanning. The Tenable Nessus product line is one of the most comprehensive in the vulnerability management space and has been an established presence in the market for years.

How to use nessus scan