File and Process Allowlist

You need to allow Tenable Nessus to access third-party endpoint security products such as anti-virus applications and host-based intrusion and prevention systems.

Note: If your Windows installation uses a non-standard drive or folder structure, use the %PROGRAMFILES% and %PROGRAMDATA% environment variables.

The table following contains a list of Tenable Nessus folders, files, and processes that you should allow. For information about allowlisting Tenable Nessus Agent processes, see File and Process Allowlist in the Tenable Nessus Agent User Guide.

Note: In addition to the files and processes listed below, Tenable recommends allowlisting certain Tenable sites on your firewall. For more information, see the Which Tenable sites should I allow? KB article.
Windows
Files
C:\Program Files\Tenable\Nessus\*
C:\Program Files (x86)\Tenable\Nessus\*
Processes
C:\Program Files\Tenable\Nessus\nessuscli.exe
C:\Program Files\Tenable\Nessus\nessusd.exe
C:\Program Files\Tenable\Nessus\nasl.exe
C:\Program Files\Tenable\Nessus\nessus-service.exe
C:\Program Files\Tenable\Nessus\openssl.exe
C:\Program Files (x86)\Tenable\Nessus\nasl.exe
C:\Program Files (x86)\Tenable\Nessus\nessuscli.exe
C:\Program Files (x86)\Tenable\Nessus\nessusd.exe
C:\Program Files (x86)\Tenable\Nessus\nessus-service.exe
C:\Program Files (x86)\Tenable\Nessus\openssl.exe
Linux
Files
/opt/nessus/bin/*
/opt/nessus/bin/openssl
/opt/nessus/sbin/*
/opt/nessus/lib/nessus/*
/opt/nessus/etc/nessus
Processes
/opt/nessus/bin/nasl
/opt/nessus/sbin/nessusd
/opt/nessus/sbin/nessuscli
/opt/nessus/sbin/nessus-service
macOS
Files
/Library/Nessus/run/sbin/*
/Library/Nessus/run/bin/*
Processes
/Library/Nessus/run/bin/nasl
/Library/Nessus/run/bin/openssl
/Library/Nessus/run/sbin/nessus-service
/Library/Nessus/run/sbin/nessuscli
/Library/Nessus/run/sbin/nessusd
/Library/Nessus/run/sbin/nessusmgt