This plugin uniquely identifies the remote Windows host by reading a UUID from a file or by writing a UUID to a file. Tenable products, such as Tenable.io and SecurityCenter, use this UUID for identifying scan targets for more accurate historical results and license counts.

This plugin uniquely identifies the remote Linux host by reading a UUID from a file or by writing a UUID to a file. Tenable products, such as Tenable.io and SecurityCenter, use this UUID for identifying scan targets for more accurate historical results and license counts.

This plugin uniquely identifies the remote host by reading a UUID from a file or by writing a UUID to a file. Tenable products, such as Tenable.io and SecurityCenter, use this UUID for identifying scan targets for more accurate historical results and license counts.

Logs generated by other plugins are reported by this plugin. Plugin debugging must be enabled in the policy in order for this plugin to run.

This plugin initializes credentials for one or more Red Hat Satellite servers as set by the user.

This plugin logs into the Red Hat Satellite server to obtain information on the host and its configuration.

This plugin logs into the Red Hat Satellite server to obtain information on the host and its missing updates.

This plugin logs into the Red Hat Satellite server to obtain information on the host and its packages. It does not connect to the target host.

This plugin connects to the target Red Hat Satellite Server and reports the hosts that it manages.

To set the credentials, edit your scan policy and go to the 'Credentials' section.

This plugin initializes the Satellite 6 server settings as set by the user. To set the settings, edit your scan policy and go to the 'Preferences' section. This plugin does not connect to the target host.

Set up Nessus product information to help facilitate some plugins to detect what platform they are running on.

This script initializes the credentials used for Rackspace services.

To set the credentials, edit your scan policy and go to the 'Preferences -> Rackspace Settings' section.

This script initializes the credentials used for Microsoft Azure services.

To set the credentials, edit your scan policy and go to the 'Preferences -> Microsoft Azure Settings' section.

This script initializes the credentials used for RHEV services.

To set the credentials, edit your scan policy and go to the 'Preferences -> RHEV Settings' section.

This script initializes the credentials used for Salesforce.com.

To set the credentials, edit your scan policy and go to the 'Preferences -> Salesforce.com Settings' section.

This script initializes the credentials used for NetApp API.

To set the credentials, edit your scan policy and go to the 'Preferences -> NetApp API Settings' section.

This plugin initializes the Symantec Altiris server settings as set by the user. To set the settings, edit your scan policy and go to the section 'Preferences'. This does not connect to the target host.

This script initializes the K1000 server settings as set by the user.
To set the settings, edit your scan policy and go to the section 'Preferences'. This does not connect to the target host.

This plugin disables scanning localhost on Tenable.io and the Tenable Appliance. Only a limited number of plugins that do not require scan targets (e.g., plugins in the 'Mobile Devices' family) are allowed to be executed.

This script initializes the credentials used for AirWatch checks done via the Web API.

To set the credentials, edit your scan policy and go to the 'Preferences' section.

This script initializes the credentials used for MongoDB services.

To set the credentials, edit your scan policy and go to the 'Preferences -> MongoDB Settings' section.

This script allows entries in a customized 'hosts' file to be whitelisted so that they are ignored by plugins that check for abnormalities in the 'hosts' file.

This script initializes the credentials used for Amazon Web Services checks done via the API.

This script initializes the credentials used for MobileIron checks done via the Web API.

To set the credentials, edit your scan policy and go to the 'Credentials' section.

This plugin sets the scan status as completed.

This plugin gathers and stores the Good MDM parameters to be used in Good MDM mobile plugins.

This plugin analyzes the scan results and applies the rules and recasts that were set up by the user.

This script initializes the credentials used for Palo Alto Firewall. 

To set the credentials, edit your scan policy and go to the 'Credentials' section.

This script initializes the credentials used for VMware checks done via the REST and SOAP API.

To set the credentials, edit your scan policy. Under 'Preferences', select 'VMware vCenter REST and SOAP API Settings'.

This plugin initializes the HCL BigFix server settings as set by the user. To set the settings, edit your scan policy and go to the section 'Preferences'. This does not connect to the target host.

Gather and store the ADSI parameters to be used in other plugins.

This plugin initializes the credentials used for Apple Profile Manager checks done via the RESTful JSON API.

To set the credentials, edit your scan policy and go to the 'Credentials' section.

This script just sets global variables (iSeries login and password) and does not perform any security check.

This script initializes the credentials used for VMware checks done via the SOAP API.

To set the credentials, edit your scan policy and go to the section 'Credentials'.  Note that these credentials will only be sent over HTTPS.

This script initializes the WSUS server credentials as set by the user under 'Policy->Preferences->Patch Preferences: WSUS Server Settings'. This does not connect to the target host.

This plugin initializes the SCCM server credentials as set by the user. To set the credentials, edit your scan policy and go to the section 'Credentials'. This plugin does not connect to the target host.

Nessus was able to resolve the fully qualified domain name (FQDN) of the remote host. This plugin, which does not show up in the report, writes the IP and FQDN of this host as an XML tag in the .nessus v2 reports.

To perform a full credentialed scan, Nessus needs the ability to connect to the remote administrative shares (C$ and ADMIN$). If the shares are not available on the network, this plugin will attempt to enable them for the duration of the scan.

You need to explicitly enable this option for this plugin to work:

  'Enable administrative shares during the scan'

 This option can be found under the following section:

 Scan Configuration > Credentials > Windows > Global Settings.

To perform a full credentialed scan, Nessus needs the ability to connect to the remote administrative shares (C$ and ADMIN$). If the shares are not available on the network, this plugin will attempt to enable them for the duration of the scan.

You need to explicitly enable this option for this plugin to work:

  'Enable administrative shares during the scan'

  This option can be found under the following section:

  Scan Configuration > Credentials > Windows > Global Settings.

This script will send a WoL (Wake-On-LAN) packet to each MAC address listed in file uploaded via its preference. 

To use this feature :

  - The scanner must be located on the same physical subnet     as the targets.

  - The MAC addresses of the targets must be listed in a     text file supplied via the policy (Edit the policy ->     Advanced -> Wake-On-LAN). Each MAC address should be     supplied on a different line.

This script will cause Nessus to wait 5 minutes (or any value configured) before starting the scan to give time to the remote systems to wake up from sleep.

The name of this machine either does not resolve or resolves to a different IP address. 

This may come from a badly configured reverse DNS or from a host file in use on the Nessus scanning host. 

As a result, URLs in plugin output may not be directly usable in a web browser and some web tests may be incomplete.

The remote host appears to be a network printer or multi-function device that supports the AppSocket (also known as JetDirect) protocol. Such devices often react very poorly when scanned - some crash, others print a number of pages.  To avoid problems, Nessus has marked the remote host as 'Dead' and will not scan it.

To perform a full credentialed scan, Nessus needs the ability to connect to the remote registry service (RemoteRegistry). If the service is down and if Nessus automatically enabled the registry for the duration of the scan, this plugins will stop it afterwards.

To perform a full credentialed scan, Nessus needs the ability to connect to the remote registry service (RemoteRegistry). If the service is down, this plugin will attempt to start for the duration of the scan.

For this plugin to work, you need to select the option 'Start the Remote Registry service during the scan' on the credentials page when you add your Windows credentials.

This plugin imports cookies for all web tests.

The cookie file must be in 'Netscape format'.

It does not perform any test by itself.

This plugin reports the values of a few important scan settings if PCI DSS compliance checks are enabled.  These scan settings are preset based on the scan template you have selected, but in some cases may be overriden.

This script sets options for generic web tests. It does not perform any test by itself.

Several scripts use the options set here to test web applications, look for cross-site scripting attacks, SQL injection, etc. in CGIs.

To perform a full credentialed scan, Nessus needs the ability to connect to the remote registry service (RemoteRegistry).

While Nessus successfully started the registry service, it could not stop it after the scan. You might want to disable it manually.

To perform a full credentialed scan, Nessus needs the ability to connect to the remote registry service (RemoteRegistry).

Nessus attempted to start the service but failed, therefore OS security patch assessment of the remote host will not be complete.

To perform a full credentialed scan, Nessus needs the ability to connect to the remote registry service (RemoteRegistry). If the service is down and if Nessus automatically enabled the registry for the duration of the scan, this plugin will stop it afterwards.

ID	Name	Severity
87415	Host Tagging (Windows)	info
87414	Host Tagging (Linux)	info
87413	Host Tagging	info
84239	Debugging Log Report	info
84238	Patch Management: Red Hat Satellite Server Settings	info
84237	Patch Management: Red Hat Satellite Server Get System Information	info
84236	Patch Management: Patch Schedule From Red Hat Satellite Server	info
84235	Patch Management: Red Hat Satellite Get Installed Packages	info
84234	Patch Management: Red Hat Satellite Server Get Managed Servers	info
84232	Patch Management: Red Hat Satellite 6 Settings	info
83955	Nessus Product Information	info
79355	Rackspace Settings	info
79358	Microsoft Azure Settings	info
77089	RHEV Settings	info
76710	Salesforce.com Settings	info
112118	Netapp API Settings	info
78013	Patch Management: Symantec Altiris Settings	info
76866	Patch Management: Dell KACE K1000 Settings	info
77328	Do not scan localhost on the Tenable Appliance or Tenable.io	info
76460	AirWatch API Settings	info
76512	MongoDB Settings	info
73980	Hosts File Whitelisted Entries	info
73490	Amazon Web Services Settings	info
72904	MobileIron API Settings	info
69869	Post-Scan Status	info
66963	Good MDM Settings	info
67099	Post-Scan Rules Application	info
64286	Palo Alto Networks PAN-OS Settings	info
63060	VMware vCenter SOAP API Settings	info
62558	Patch Management: IBM Tivoli Endpoint Manager Server Settings	info
60024	ADSI Settings	info
60032	Apple Profile Manager API Settings	info
57861	IBM iSeries Credentials	info
57395	VMware SOAP API Settings	info
57031	Patch Management: WSUS Server Settings	info
57029	Patch Management: SCCM Server Settings	info
47557	Host Fully Qualified Domain Name (FQDN) Resolution (XML tag)	info
55438	SMB : Disable the C$ and ADMIN$ shares after the scan (WMI)	info
55437	SMB : Enable the C$ and ADMIN$ shares during the scan (WMI)	info
52616	Wake-on-LAN	info
46215	Inconsistent Hostname and IP Address	info
44920	Do not scan printers (AppSocket)	info
42898	SMB Registry : Stop the Registry Service after the scan (WMI)	info
42897	SMB Registry : Start the Registry Service during the scan (WMI)	info
42893	HTTP cookies import	info
40472	PCI DSS compliance : options settings	info
39471	Web Application Tests Settings	info
35706	SMB Registry : Stopping the Registry Service after the scan failed	info
35705	SMB Registry : Starting the Registry Service during the scan failed	info
35704	SMB Registry : Stop the Registry Service after the scan	info

Detections

Analytics

Settings Family for Nessus

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info