Install Tenable Network Monitor on the NAT Gateway

Before You Begin

Follow the instructions on setting up a NAT gateway in a Google Compute Engine legacy network.

The Tenable Network Monitor installer package for your NAT gateway instance's platform can be downloaded from the Tenable Downloads page.

Steps

1. Copy the Tenable Network Monitor installer package to the home directory in your NAT gateway instance.

   $ gcloud compute copy-files /path/to/nnm-installer nat-gateway:~ --zone us-east1-b

2. Create a firewall rule to allow incoming connections to the Tenable Network Monitor Web server. By default, the Tenable Network Monitor Web server listens on port 8835.

   $ gcloud compute firewall-rules create gce-network-allow-nnm-www --allow tcp:8835 --network gce-network

    

   Created [https://www.googleapis.com/compute/v1/projects/nnm-example-project/global/firewalls/gce-network-allow-nnm-www].

   NAME                      NETWORK     SRC_RANGES RULES    SRC_TAGS TARGET_TAGS

   gce-network-allow-nnm-www gce-network 0.0.0.0/0  tcp:8835

3. Log in to your NAT gateway instance.

   $ gcloud compute ssh nat-gateway --zone us-east1-b

4. Once logged into your NAT gateway instance, install Tenable Network Monitor.

   Once Tenable Network Monitor is installed and running on the NAT gateway, you may access the Tenable Network Monitor web front end by navigating to https://<external IP address of nat-gateway>:8835 in your Web browser. The external IP address of nat-gateway can be found by executing gcloud compute instances describe nat-gateway and looking for networkInterfaces > accessConfigs > natIP.