Manage Advanced Settings
Required User Role: User with administrator privileges
The nessuscli fix
command has a series of options to manage the advanced settings on your Tenable Nessus scanner.
For information on what advanced settings are configurable in your version of Tenable Nessus, see Advanced Settings in the Tenable Nessus User Guide.
To see and copy the full command for your specific operating system, see the Command Quick Reference.
Usage
To view all advanced settings:
To view all advanced settings, including those you have not set, use the following command:
If you have not set an advanced setting, the default value is listed in the output.
To view a list of currently set advanced settings:
To list all advanced settings that you have set, use the following command:
The following is example output:
# nessuscli fix --list
qdb_mem_usage: low
report_crashes: yes
stop_scan_on_disconnect: no
reduce_connections_on_congestion: no
global.max_web_users: 1024
global.max_scans: 0
nasl_log_type: normal
nasl_no_signature_check: no
disable_xmlrpc: no
disable_ntp: yes
ssl_cipher_list: strong
xmlrpc_idle_session_timeout: 30
xmlrpc_listen_port: 8834
listen_port: 1241
listen_address: 0.0.0.0
slice_network_addresses: no
silent_dependencies: yes
auto_enable_dependencies: yes
safe_checks: yes
plugins_timeout: 320
non_simult_ports: 139, 445, 3389
checks_read_timeout: 5
allow_post_scan_editing: yes
optimize_test: yes
port_range: default
cgi_path: /cgi-bin:/scripts
rules: /Library/Nessus/run/etc/nessus/nessusd.rules
dumpfile: /Library/Nessus/run/var/nessus/logs/nessusd.dump
log_whole_attack: no
www_logfile: /Library/Nessus/run/var/nessus/logs/www_server.log
logfile: /Library/Nessus/run/var/nessus/logs/nessusd.messages
throttle_scan: yes
max_checks: 5
global.max_hosts: 2180
max_hosts: 100
auto_update_delay: 24
auto_update: yes
To see the current value for an advanced setting:
For example:
# nessuscli fix --get max_hosts
The current value for 'max_hosts' is '100'.
To set a specific value for an advanced setting:
Example:
# /opt/nessus/sbin/nessuscli fix --set max_hosts=200
Successfully set 'max_hosts' to '200'.
To delete your value from an advanced setting:
Example:
# /opt/nessus/sbin/nessuscli fix --delete max_hosts
Successfully deleted 'max_hosts'.
Secure Settings
You can use the --secure flag to manage encrypted advanced settings, which contain information about registration. Tenable does not recommend changing undocumented --secure settings as it may result in an unsupported configuration.
For the following commands, you can use the --secure
flag:
# nessuscli fix --secure --list
# nessuscli fix --secure --fix --set <setting name=value>
# nessuscli fix --secure --get <setting>
# nessuscli fix --secure --delete <setting>
For the full command for your operating system, see the following:
nessuscli fix --show
nessuscli fix --list
nessuscli fix --get <setting>
nessuscli fix --set <setting>=<value>
nessuscli fix --delete <setting>