TOC & Recently Viewed

Recently Viewed Topics

Install a Nessus Agent on Mac OS X

Caution: If you install a Nessus Agent on a system where an existing Nessus Agent, Manager, or Scanner is running nessusd, the installation process kills all other nessusd processes. You may lose scan data as a result.

Download Nessus Agent

From the Nessus Agents Download Page, download the package specific to your operating system.

Install Nessus Agent

Note: The following steps require root privileges.

To install the Nessus Agent, you can use either the GUI installation wizard or the command line.

GUI Installation:

  1. Double-click the Nessus agent .dmg (Mac OS X Disk Image) file.
  2. Double-click Install Nessus Agent.pkg.
  3. Complete the Nessus Agent Install Wizard.

Command Line Installation:

  1. Extract Install Nessus Agent.pkg and .NessusAgent.pkg from NessusAgent-<version number>.dmg.

    Note: The .NessusAgent.pkg file is normally invisible in macOS Finder.

  2. Open Terminal.
  3. At the command prompt, enter the following command:
  4. # installer -pkg /<path-to>/Install Nessus Agent.pkg -target /

You can install a full plugins set before linking for the purpose of reducing the bandwidth impact during a mass installation. This is accomplished via the nessuscli agent update command with the --file parameter specifying the location the plugins set. This must be done prior to starting the Nessus Agent. For example:

/opt/nessus_agent/sbin/nessuscli agent update --file=./plugins_set.tgz

The plugins set must be less than five days old. A stale plugins set older than five days will force a full plugins download to occur. You can download a recent plugins set from the Nessus Agents download page.

Link Agent Using Command Line Interface

To link an agent on a Mac OS X:

  1. Open Terminal.
  2. At the command prompt, use the nessuscli agent link command.

    For example:

    # /Library/NessusAgent/run/sbin/nessuscli agent link
    --key=00abcd00000efgh11111i0k222lmopq3333st4455u66v777777w88xy9999zabc00
    --name=MyOSXAgent --groups=All --host=yourcompany.com --port=8834

    The supported arguments for this command are:

    Argument Required? Value
    key

    yes

    Use the values you from the manager.
    host yes
    port yes

    name

    no Specify a name for your agent. If you do not specify a name for your agent, the name defaults to the name of the computer where you are installing the agent.
    groups no Specify existing agent group or groups where you want to add the agent. If you do not specify an agent group during the install process, you can later add your linked agent to the group in Nessus Manager or Tenable.io.
    offline-install no

    If the agent cannot connect to the controller then it retries every hour, and if the agent can connect to the controller but the link fails then it retries every 24 hours.

    cloud no

    Specify the --cloud argument to link to Tenable.io.

    The --cloud argument is a shortcut to specifying --host=cloud.tenable.com --port=443.

Verify a Linked Agent

To verify a linked agent in Nessus Manager:

  1. In the top navigation bar, click Scans.

    The My Scans page appears.

  2. In the left navigation bar, click Agents.

    The Agents page appears.

  3. Locate the new agent in the linked agents table.

Copyright 2017 - 2018 Tenable, Inc. All rights reserved. Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable, Inc. Tenable, Tenable.io, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.