File and Process Allowlist

Tenable recommends allowing the following Tenable Nessus folders and processes in first-party and third-party endpoint security products such as anti-virus applications and host-based intrusion and prevention systems.

For information about allowlisting Tenable Nessus Agent processes, see File and Process Allowlist in the Tenable Nessus Agent User Guide.

Note: In addition to the folders and processes listed below, Tenable recommends allowlisting certain Tenable sites on your firewall. For more information, see the Which Tenable sites should I allow? KB article.

Windows

 

Folders

Note: If your Windows installation uses a non-standard drive or folder structure, use the %PROGRAMFILES% and %PROGRAMDATA% environment variables.

C:\Program Files\Tenable\Nessus\*
C:\Program Files (x86)\Tenable\Nessus\*
Processes
C:\ProgramData\Tenable\Nessus\nessus\tmp
C:\Program Files\Tenable\Nessus\nessuscli.exe
C:\Program Files\Tenable\Nessus\nessusd.exe
C:\Program Files\Tenable\Nessus\nasl.exe
C:\Program Files\Tenable\Nessus\nessus-service.exe
C:\Program Files\Tenable\Nessus\openssl.exe
C:\Program Files (x86)\Tenable\Nessus\nasl.exe
C:\Program Files (x86)\Tenable\Nessus\nessuscli.exe
C:\Program Files (x86)\Tenable\Nessus\nessusd.exe
C:\Program Files (x86)\Tenable\Nessus\nessus-service.exe
C:\Program Files (x86)\Tenable\Nessus\openssl.exe
Linux
Folders
/opt/nessus/bin/*
/opt/nessus/bin/openssl
/opt/nessus/sbin/*
/opt/nessus/lib/nessus/*
/opt/nessus/etc/nessus
Processes
/opt/nessus/bin/nasl
/opt/nessus/sbin/nessusd
/opt/nessus/sbin/nessuscli
/opt/nessus/sbin/nessus-service
macOS
Folders
/Library/Nessus/run/sbin/*
/Library/Nessus/run/bin/*
Processes
/Library/Nessus/run/bin/nasl
/Library/Nessus/run/bin/openssl
/Library/Nessus/run/sbin/nessus-service
/Library/Nessus/run/sbin/nessuscli
/Library/Nessus/run/sbin/nessusd
/Library/Nessus/run/sbin/nessusmgt