In high-security environments, air-gapped networks, or strictly controlled enterprise environments, Tenable Nessus scanners often operate without direct internet access. These offline scanners require manual updates to remain effective against the newest vulnerabilities. The core mechanism for updating these scanners is the nessus-update-plugins all-2.0.tar.gz file.
A valid or Tenable Security Center license. A machine with internet access to download the file.
: In the top navigation bar, select Settings . Software Update : From the left menu, click Software Update .
– Use the Tenable Nessus Offline Update Download Script : download nessus-update-plugins all-2.0.tar.gz
: Allow 10 to 30 minutes for the scanner to rebuild its database. Do not restart the machine during this phase.
On the next page, click the link labeled (or the corresponding archive file link) to download the plugin package.
Executive summary
Installing/updating plugins
As new security vulnerabilities are discovered and published daily, new plugins are created to detect them.
: Copy all-2.0.tar.gz and the .license file to the Nessus server. A common temporary location is the /tmp/ directory or the primary Nessus directory ( /opt/nessus/sbin/ ). A valid or Tenable Security Center license
Troubleshooting common issues
While Nessus is designed to reach out to Tenable's servers for updates, several use cases demand offline manual updates:
In high-security environments, air-gapped networks, or strictly controlled enterprise environments, Tenable Nessus scanners often operate without direct internet access. These offline scanners require manual updates to remain effective against the newest vulnerabilities. The core mechanism for updating these scanners is the nessus-update-plugins all-2.0.tar.gz file.
A valid or Tenable Security Center license. A machine with internet access to download the file.
: In the top navigation bar, select Settings . Software Update : From the left menu, click Software Update .
– Use the Tenable Nessus Offline Update Download Script :
: Allow 10 to 30 minutes for the scanner to rebuild its database. Do not restart the machine during this phase.
On the next page, click the link labeled (or the corresponding archive file link) to download the plugin package.
Executive summary
Installing/updating plugins
As new security vulnerabilities are discovered and published daily, new plugins are created to detect them.
: Copy all-2.0.tar.gz and the .license file to the Nessus server. A common temporary location is the /tmp/ directory or the primary Nessus directory ( /opt/nessus/sbin/ ).
Troubleshooting common issues
While Nessus is designed to reach out to Tenable's servers for updates, several use cases demand offline manual updates: