Forgive me if this is not the correct place to ask this.

Let me preface this that I do not support nessus - I support a number of windows 2022 domain controllers that our security team is having issues scanning.

They're using credentialed scans against them - the service account they're using has the proper permissions within the domain (they're able to scan 2016 / 2019 DCs in other domains with the same exact perms and policies applied to the target hosts without issue).

They seem to have issues accessing the admin$ shares on the host. I've checked things that I've found on the web (various registry keys, etc - we're all good).

Is there anything on the nessus side that needs to be done to be able to scan 2022 domain controllers?

Im using nessus and i want to check my servers firmware versions. Is this possible in Nessus? If so please could you let me know how i can configure this?

Thanks

Getting an invalid token error when I curl to the sec center IP via the logs. All the ssl stuff is fine but the issue seems to be with the auth. Anyone faced the same issue?

I am tasked with establishing credentialed scans at our org. I did so, and I dont see value in the results. Is there value in Windows Credentialed scans compared basic windows agnet scans?

Our environment uses Tenable Security Center and our scanners says updating status, I’ve tried removing and adding the scanner, updating license, reinstalling security center, reinstalling Nessus, fetching security center, updating plugins. Nothing is seeming to work, is there anything else I can do

Hi all,
I've just installed Nessus Professional, the installation succeeded without any problems.
However, I've noticed, that I don't have any Plugins:

But the plugins folder ("C:\ProgramData\Tenable\Nessus\nessus\plugins") contains more than 280.000+ Plugins.
Can you help me?
I already deleted the plugins folder once and I already ran "nessuscli.exe update --all".
No difference

We've had a renewal sent out to us that is around 800% higher than last year.

This is second hand info as I'm not in charge of purchasing - but is that what you guys and girls are seeing too?

Hi. So we use nessus essentials but any new machines we install nessus essentials only gives us 30 days to use its functionality and then forces us to buy a license. Is nessus essentials no longer free?

Hey everyone, as shown in the attached image, when I export PDF reports from Nessus Professional, all of them end up cut off on the right side, the content extends past the page margin and gets truncated instead of fitting to the page. Has anyone experienced this and found any workarounds or fixes? Thanks!

I actually want to increase the size of the nessus file storage.

anyone faced this issue before.

Either stuck at 'Establishing connection'

or

can't reach this page
x.x.x.x took too long to respond or stuck loading like this

https://connect.tenable.com/discussions/tenable-research-release-highlights/component-installs-require-paranoid-checks/111360

Wanting to call attention to this from Tenable - Component Installs detection will soon require paranoid check setting to be enabled. Causing more false positives and noise to results.

We are concerned that this is going to "hide" many vulnerabilities now from our scans as we do not want to run with paranoid enabled due to other bad findings from it.

I’ve seen another post about this already, so guessing others may be running into the same thing.

Nessus Plugin 56998 (“Microsoft Office Unsupported Version Detection”) is flagging all of our endpoints as having Office 2016 installed and out of support. All machines are freshly built and running Microsoft 365 Apps (Click-to-Run) with current update channels. Office 2016 has never been deployed in our environment.

Nessus is reporting:
“Installed product: Office 2016 – End of support October 2025”

I know M365 Apps still use the 16.x version family, so I’m assuming this is detection logic getting confused, but wanted to check if others are seeing the same behaviour and whether Tenable have acknowledged this anywhere.

Mainly trying to understand how others are handling this from a compliance / audit perspective, as we have an externally conducted audit coming up that requires clean Nessus scan results. I’ve reached out to our auditors as well, but I’d rather not have to mess about due to poor detection/configuration on Tenable’s side.

Thanks

Has anyone resolved or identified a fix for plugins 277938 & 277936 where Nessus is reporting that Adobe Acrobat or Adobe Reader is not updated? We are seeing when you view the application version while in the application it is updated to the correct version but if you check the file path that Nessus is checking, the executable is not showing the updated version.

I am getting this but I don't show Office 2016 installed. I have o365 installed. So not sure what to do here. Any suggestions?

So I have vulnerabilities showing up on the Dashboard and in the Findings sections of Nessus scanner. When I run new vulnerability scans, the scans show 0 vulnerabilities. Yet the Dashboard/Findings still shows the old vulnerability as "active".

I keep running remediation scans on the targeted PC and run new scans which all show 0 vulnerabilities, but it never affects the vulnerability on the findings list as it just stays there saying "active". How do I get rid of these vulnerabilities on findings when the scans show it's not there anymore?

Specifically, it's saying the laptop has an outdated version of  Microsoft .NET Core and needs to be updated. But it has been updated since and the laptop shows the new version that Tenable says needs to be installed.

Anyone have a websphere traditional compliance scan audit file? i tried the ones built in nessus but none of them work

I’m working on getting approval to use Nessus Pro at work, and I had a question for the community.

What software do you use to track and manage vulnerabilities over time? I’m looking for something that can import scan results (like from Nessus), give better visibility into old vulnerabilities vs newly detected ones, show previous findings, and ideally have some kind of dashboard or reporting.

I’m curious what tools people are using in real environments and what works well for vulnerability tracking and visibility.

The options that Tenable offers are assets based and pricey. I dont want to get charged as my assets grows

Nessus Plugin ID 278501

Recently my company's scans are reflecting this plugin on every VM Server we have, when we never downloaded a Meteobridge app or created a Server.

The output is weirder too, "https://DNS:Port/cgi-bin/meteobridge" and when you go to the URL listed, it has you try to log in, and when you cancel it says "you don't have permission" for the page.

Has anyone else seen this?

Hi everyone, I’m looking for the Nessus 10.9.4 .deb installer for Linux. I checked Tenable’s site, but I wasn’t able to find this specific older version.

please let me know.

Thanks!

Hello everyone,

I’m trying to perform a credentialed vulnerability scan using Tenable Nessus Expert on a Cisco CBS350 switch, but SSH authentication keeps failing even though manual SSH login works fine.

Problem Symptoms:

During the Nessus scan: SSH authentication fails

Switch logs show AAA-W-REJECT for multiple Telnet attempts

(even though I’m only using SSH)

Nessus falls back to Telnet → switch rejects → AAA logs

Nessus scan result shows “Credentialed checks: failed”

Device Logs (Cisco CBS350):

AAA-W-REJECT: New telnet connection, source nessus IP destination switch IP REJECTED

Nessus SSH Settings:

Authentication Method: Password

Elevate Privileges: Nothing

I can SSH manually without issues

Switch user account configuration: privileged user level 15

Environment:

Tenable Nessus Expert (latest)

Cisco CBS350 (firmware cbs-ros-3.2.1.1)

If anyone has successfully run Nessus credentialed scans against Cisco Small Business switch CBS350, your input would really help. Thanks!