Cloud Sensors

By default, Tenable provides regional cloud sensors. You can select these sensors when you create and launch scans.

The following table identifies each Tenable.io regional cloud sensor and, for allow list purposes, its IP address ranges. These IP address ranges are exclusive to Tenable.

Note: If you use cloud connectors, Tenable recommends allowlisting the IP addresses for the region in which the Tenable.io site resides.

Tip: The cloud sensor and IP address information contained in the table below is also provided in JSON format for users that want to parse the data programmatically.

Tip: In addition to the above listed IP address ranges, add the following for internal scanner or agent communications:

  • 162.159.129.83/32
  • 162.159.130.83/32
  • 2606:4700:7::a29f:8153
  • 2606:4700:7::a29f:8253
  • *.cloud.tenable.com with the wildcard character (*) to allow cloud.tenable.com and all subdomains, such as sensor.cloud.tenable.com

If you do not include these ranges, the sensor automatically resolves to the aforementioned regional cloud sensors.

Note: In Tenable.io Federal Risk and Authorization Management Program (FedRAMP) environments:

For cloud based network scans, add the following IP range to your allow list:

  • 3.32.43.0 - 3.32.43.31 (3.32.43.0/27)

For internal scanner or agent communications, add the following IP ranges to your allow list:

  • 52.61.37.84
  • 15.200.117.191

The Tenable.io interface displays regional cloud sensors in the following groups:

  • US East Cloud Scanners: A group of scanners from the us-east-1 (Virginia) or the us-east-2 (Ohio) ranges.
  • US West Cloud Scanners: A group of scanners from the us-west-1 (California) or the us-west-2 (Oregon) ranges.
  • AP Singapore Cloud Scanners: A group of scanners from the ap-southeast-1 (Singapore) range.
  • AP Sydney Cloud Scanners: A group of scanners from the ap-southeast-2 (Sydney) range.
  • AP Tokyo Cloud Scanners: A group of scanners from the ap-northeast-1 (Tokyo) range.
  • CA Central Cloud Scanners: A group of scanners from the ca-central-1 (Canada) range.
  • EU Frankfurt Cloud Scanners: A group of scanners from the eu-central-1 (Frankfurt) range.
  • UK Cloud Scanners: A group of scanners from the eu-west-2 (London) range.
  • Brazil Cloud Scanners: A group of scanners from the sa-east-1 (São Paulo) range.
  • India Cloud Scanners: A group of scanners from the ap-south-1 (Mumbai) range.
  • Amazon GOV-CLOUD: A group of scanners available for Federal Risk and Authorization Management Program (FedRAMP) environments.
  • US Cloud Scanner: A group of scanners from the following AWS ranges:
    • us-east-1 (Virginia)

    • us-east-2 (Ohio)

    • us-west-1 (California)

    • us-west-2 (Oregon)

  • APAC Cloud Scanners: A group of scanners from the following AWS ranges:
    • ap-northeast-1 (Tokyo)
    • ap-southeast-1 (Singapore)
    • ap-southeast-2 (Sydney)

    • ap-south-1 (Mumbai)

  • EMEA Cloud Scanners: A group of scanners from the following AWS ranges:
    • eu-west-1 (Ireland)
    • eu-west-2 (London)
    • eu-central-1 (Frankfurt)