Configure Tenable Nessus Network Monitor

To configure Tenable Nessus Network Monitor:

  1. In a web browser, navigate to https://<ip address or hostname>:8835.

  2. Type the default username and password, which are both admin.

  3. Click Sign In To Continue.

  4. The Change Default Password screen of the Quick Setup window appears, where you can change the default password. The new password must meet the following minimum requirements:

    • Minimum 5 characters long

    • One capital letter

    • One lowercase letter

    • One numeric digit

    • One special character from the following list: !@#$%^&*()

  5. Click Next Step.

    The Set Activation Code screen appears.

  6. To register Tenable Nessus Network Monitor offline, select the Register Offline check box and see Register Tenable Nessus Network Monitor Offline via the CLI.

  7. In the Activation Code box, type the appropriate text based on your setup:

    • If Tenable Nessus Network Monitor is acting as a standalone device, type an Activation Code.

    • If Tenable Nessus Network Monitor is managed by Industrial Security, type IndustrialSecurity.

      Industrial Security is end-of-life (EOL). For information about EOL dates and policies for Tenable products, see the Tenable Software Release Lifecycle Matrix and Policy.

      1. In the Industrial Security Host box, type the IP address of the Industrial Security instance.

      2. In the Industrial Security Port box, type the port of the Industrial Security instance.

      3. In the Industrial Security Key box, type the key copied from the Industrial Security instance. See the Industrial Security User Guide for more information.

      4. In the NNM Name box, type a name for the Tenable Nessus Network Monitor instance. This name appears in the Industrial Security interface.

    • If Tenable Nessus Network Monitor is managed by Tenable Vulnerability Management, type Cloud.

      Four configuration options appear: Cloud Host, Cloud Port, Cloud Key, and Tenable Nessus Network Monitor Name. See the Cloud Settings section for more information.

    • If Tenable Nessus Network Monitor is managed by Tenable Security Center, type SecurityCenter. See the Tenable Security Center User Guide for more information.

    In all cases, a valid Activation Code must be typed in the Activation Code box.

  8. Click Next Step.

    The Monitoring Configuration screen appears.

    • The Monitored Network Interfaces box displays the monitored interfaces identified by Tenable Nessus Network Monitor. You can select one or more of the defined interfaces. The caret icon displays additional information about each interface.

    • The Monitored Network IP Addresses and Ranges box displays the IP address ranges Tenable Nessus Network Monitor monitors.

    • The Excluded Network IP Addresses and Ranges box displays the IP address ranges Tenable Nessus Network Monitor does not monitor.

    The Monitored Network IP Addresses and Ranges and Excluded Network IP Addresses and Ranges boxes accept both IPv4 and IPv6 CIDR address definitions. When using multiple addresses, separate the entries using commas or new lines.

    Note: Tenable Network Security does not recommend typing large ranges such as 0.0.0.0/0. Because this indicates to Tenable Nessus Network Monitor that any and all network addresses belong in the network, performance may be severely impacted. Please only include addresses in your network, as each address undergoes in-depth processing.

  9. Click Finish.

    The Monitoring page appears. Once Tenable Nessus Network Monitor starts monitoring traffic, the page displays various high-level charts about the vulnerabilities, assets, connections, and bandwidth usage that Tenable Nessus Network Monitor has detected, as well as real-time events that Tenable Nessus Network Monitor has triggered.

Note: By default, Tenable Nessus Network Monitor has discovery mode enabled when installed. You must disable discovery mode for Tenable Nessus Network Monitor to load plugins into memory. For more information on discovery mode, see Tenable Nessus Network Monitor Settings Section.