Before downloading anything, log into your offline Nessus host via the command-line interface (CLI) to fetch its unique hardware identifier.
This procedure is typically required in environments where the Nessus scanner does not have direct internet access to fetch updates automatically, or when a specific version of plugins must be staged across multiple scanners for consistency.
You have two primary ways to install your new plugin package: the quick command terminal or the browser dashboard. Method A: Use the Command Line Interface (Recommended) download nessusupdateplugins all20targz new
Understanding Nessus Offline Plugin Updates Nessus vulnerability scanners require regular plugin updates to detect the latest security threats. Scanners isolated from the internet cannot communicate directly with the Tenable update servers. System administrators use a specific compressed file archive to update these air-gapped systems manually.
Downloading and Updating Nessus Plugins: A Guide to all-2.0.tar.gz Before downloading anything, log into your offline Nessus
Look for a section titled “Offline Plugin Updates” or “Manual Plugin Update” . You will see a line similar to:
Set up a single internal web server that can reach the internet (or use a staging machine). Download the latest all-2.0.tar.gz to this mirror. Then, configure all your internal, isolated Nessus servers to pull the file from this central repository via SCP, Rsync, or a dedicated shell script. Method A: Use the Command Line Interface (Recommended)
Navigate to the Nessus sbin directory (default location varies by OS, commonly /opt/nessus/sbin/ or /usr/local/bin/ ) and run the utility pointing to the archive.
Pick , click Continue , and choose your new all-2.0.tar.gz file. Phase 4: Monitor the Verification Process
Write a simple wrapper script that does the following:
: Before transferring the file to your offline server, verify its integrity using the SHA256 or MD5 checksum provided on the Tenable downloads page. This step prevents corrupted installations that could break your scanner.