The following are security updates included in Nessus Agent 10.1.3:
OpenSSL was updated to the latest version 1.1.1n.
For more information, see the Tenable Product Security Advisory.
Nessus Agents upgraded via Nessus Manager will not upgrade to 8.2.0 and later unless Nessus Manager is already updated to 8.12.0 or later.
New Tenable.io Domain - As a part of continuous security and scalability improvements to Tenable infrastructure, we have added a new sensor.cloud.tenable.com domain that Tenable.io-linked agents communicate with.
Starting with Agent 8.1.0, Tenable.io-linked agents communicate with Tenable.io using sensor.cloud.tenable.com. In case agents are not able to connect to the new domain, they fall back to using cloud.tenable.com. Agents with earlier versions will continue to use the cloud.tenable.com domain.
- Recommended Action: If you use domain allow lists for firewalls, Tenable recommends adding *.cloud.tenable.com (with the wildcard character) to the allow list. This ensures communication with sensor.cloud.tenable.com and all future subdomains, reducing operational overhead. Please contact your network administrator for assistance with making necessary changes to your allow list.
- You can upgrade to the latest version of Nessus Agent from any previously supported version.
- If your upgrade path skips versions of the Agent, Tenable recommends reviewing the release notes for all skipped versions to learn about new features and bug fixes.