Audit Microsoft Azure in Nessus

Tenable offers the ability to audit the Microsoft Azure Cloud environment to detect misconfigurations in the cloud environment and account settings using Nessus. Complete the following steps to Audit Microsoft Azure in Nessus.

Before you Begin:

Create a Microsoft Azure Application

Note: No pre-authorization is needed from Microsoft to perform the audit, but a Microsoft Azure account is required.

To Audit Microsoft Azure in Nessus:

  1. Log in to Nessus.
  2. Click Scans.

    The My Scans page appears.

  3. Click + New Scan.

    The Scan Templates page appears.

  4. In the Compliance section, select the Audit Cloud Infrastructure template.

    The Audit Cloud Infrastructure page Settings tab appears.

  5. In the Name box, type a descriptive name for the scan.

  6. (Optional) In the Description box, enter information to describe your scan.
  7. Click the Credentials tab.
  8. In the Categories section, click Microsoft Azure.

    The Microsoft Azure options appear.

  9. Click the Authentication Method drop-down menu to select your preferred authentication method: key or password.
  10. Configure the credentials for your selected authentication method.

  1. Click Compliance.

  2. Click Microsoft Azure.

    Tenable offers pre-configured compliance checks and provides the ability to upload a custom Azure audit file.

    Note: For information on creating a custom audit, see Microsoft Azure Audit Compliance Reference in the Nessus Compliance Checks Reference Guide.

  3. Click each compliance check you want to add to the scan.
  4. If you choose to add a custom audit file, click Add File and select the file to upload.

  1. Click Save.

    The credential saves and the My Scans page appears.

Note: For additional information on configuring Nessus scans, refer to the Nessus User Guide.