Monitor the nessusd process using top or Task Manager; allow it to finish processing naturally.
Aim to update your offline plugins at least weekly, as new vulnerabilities are disclosed daily.
Before applying the update, the Nessus service must be halted.
What (e.g., Red Hat Linux, Ubuntu, Windows Server) your Nessus scanner runs on?
Once you have safely transferred the real all-2.0.tar.gz file to your offline Nessus server, you must install it using the correct nessuscli syntax. On Linux Systems download nessusupdateplugins all20targz top
Once the command completes, you should see a message indicating the plugins were successfully installed. Updating Plugins via the Web UI (Offline)
try: md5_hash = hashlib.md5() with open(filepath, 'rb') as f: for chunk in iter(lambda: f.read(4096), b''): md5_hash.update(chunk)
Enter your activation code (or username/password) and the challenge code.
DOWNLOAD_DIR="$DOWNLOAD_DIR:-/tmp/nessus_plugins" PLUGIN_VERSION="$PLUGIN_VERSION:-all-2.0" TENABLE_API_URL="https://www.tenable.com/downloads/api/v2/public/nessus" Monitor the nessusd process using top or Task
By following this guide, you can ensure that your offline Nessus scanners remain as effective as those in fully connected environments.
sudo ./nessus-update-plugins /path/to/all-2.0.tar.gz
sudo systemctl start nessusd
Once you have securely transferred the nessusupdateplugins-all-2.0.tar.gz file to the offline scanner (e.g., via secure USB drive or encrypted network share), you will install it using the command-line interface. Access the terminal on your Nessus scanner. What (e
while [[ $# -gt 0 ]]; do case $1 in --version) PLUGIN_VERSION="$2" shift 2 ;; --output-dir) DOWNLOAD_DIR="$2" shift 2 ;; --extract) EXTRACT="true" shift ;; --help) echo "Usage: $0 [OPTIONS]" echo "Options:" echo " --version VERSION Plugin version (default: all-2.0)" echo " --output-dir DIR Download directory (default: /tmp/nessus_plugins)" echo " --extract Extract the archive after download" echo " --help Show this help message" exit 0 ;; *) log_error "Unknown option: $1" exit 1 ;; esac done
Broken or incomplete download from the portal; file truncated during USB transfer.
This process is CPU-intensive as Nessus extracts, verifies, and indexes thousands of detection scripts. Depending on your system hardware (CPU speed and RAM), compilation can take anywhere from . Do not interrupt or restart the machine during this phase. 🔍 Troubleshooting Common Offline Update Issues Probable Cause Recommended Solution "Invalid License" Error Challenge code changed or mismatched.
Once the plugin archive is successfully saved to your internet-facing workstation, you must safely bridge the air gap. Use an approved physical data transit medium (such as a scanned USB drive, a secure optical disc, or an internal cross-domain bastion file transfer protocol) to move the all-2.0.tar.gz file onto the offline Nessus host file system. Method A: Command-Line Installation (Recommended)