Nessus AMI Now Available on AWS Marketplace
Tenable is excited to announce the availability of the Nessus vulnerability scanner on AWS, Amazon's cloud platform, as an official AMI (Amazon Machine Image). AWS customers may use the Nessus AMI to scan, audit, and monitor for software vulnerabilities in all their AMIs — whether in development, staging, or production.
Scanning the Cloud
Amazon Web Services (AWS) is a flexible, scalable, and low-cost cloud computing platform that offers businesses on-demand delivery of IT resources with pay-as-you-go pricing. With AWS, you can develop, launch, and operate software applications with minimal administrative overhead or worrying about having enough computing, storage, and database resources. However, one big area of concern remains for your software on AWS: security.
Scanning Amazon's cloud remotely poses challenges and risks, such as consuming Internet bandwidth, scans taking longer because they are going across the Internet, and the security of the scan results in transit.
By using the official Nessus AMI, your scanning occurs within Amazon's cloud and not across the Internet, offering better integrity and performance. For added security, Amazon cloud customers can create a VPN between your network and the Amazon cloud.
Therefore, Tenable and Amazon recommend that all new and existing AWS customers scan their AMIs with Nessus while in development and staging, before publishing to AWS users. This includes SecurityCenter customers as well, as you can deploy a Nessus AMI image and manage it with SeucurityCenter just as you would any other scanner.
Nessus is available for all AWS customers under a Bring Your Own License (BYOL) model. Customers interested in leveraging Nessus to secure their AMI must first purchase a Nessus subscription either directly from Tenable's eCommerce store or from an authorized reseller. The subscription will provide an Activation Code to apply when provisioning a Nessus instance directly from your AWS account.
Easy Setup
When you visit and search the Amazon Marketplace, you can enter "nessus" as a search term. This will bring you to the entry for Nessus in the Marketplace where you can review information about the AMI as shown below:
The AMI is deployed just as it would with any other AMI in the Amazon Marketplace. You will need to choose the instance type and the security role of the new instance. A default security role is defined for you, which results in standard firewall rules being applied for the Nessus vulnerability scanner.
Above you can see the instance being deployed. In just a short amount of time you can be up and running with Nessus in your Amazon cloud! Please note the latest version of the Nessus vulnerability scanner (5.2.4) is now available to all Amazon customers, the above screenshots are examples.
After the instance has initialized, open a browser and connect to the instance to complete the configuration:
https://<Elastic IP Address>:8834
The external hostname or Elastic IP address (EIP) can be found by clicking on the instance in the EC2 console. From there you can configure Nessus just as you would on any other system.
Conclusion
Nessus and SecurityCenter customers can visit the Amazon Marketplace and begin installing the Nessus AMI into their cloud environments. It is now easier than ever to scan your cloud infrastructure thanks to this partnership between Tenable and Amazon. For more information, or for help with deployment, customers can visit the Tenable Support Portal and/or ask questions directly in the Tenable Discussions Forum.
Resources
Related Articles
Tenable Cloud Security To Help Fed Agencies Tackle Cloud Challenges as It Nears FedRAMP Authorization
July 31, 2024As federal agencies adopt a cloud-first policy, they face unique challenges in securing cloud infrastructure. Learn how Tenable Cloud Security, which is now FedRAMP "In Process," can help.
Tenable Customer Update about CrowdStrike Incident
July 19, 2024Please read this important customer update about CrowdStrike's recent incident.
Tenable Announces Former Senior Administration Officials to Inaugural Public Sector Advisory Board
July 18, 2024Rob Joyce and Mark Weatherford will help Tenable shape federal cyber and AI policy
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- Announcements
- Cloud
- Nessus