Cloud Sensors

By default, Tenable provides regional cloud sensors. You can select these sensors when you create and launch scans.

The Tenable.io interface displays regional cloud sensors in the following groups:

  • US Cloud Scanner: A group of scanners from one US-EAST range (Ohio or Virginia) and the US-WEST range.
  • US East Cloud Scanners: A group of scanners from either the Ohio or Virginia US-EAST range.
  • US West Cloud Scanners: A group of scanners from the US-WEST range.
  • AP Singapore Cloud Scanners: A group of scanners from the Singapore AP-SOUTHEAST range.
  • AP Sydney Cloud Scanners: A group of scanners from the Sydney AP-SOUTHEAST range.
  • AP Tokyo Cloud Scanners: A group of scanners from the AP-NORTHEAST-1 range.
  • CA Central Cloud Scanners: A group of scanners from the CA-CENTRAL-1 range.
  • EU Frankfurt Cloud Scanners: A group of scanners from the EU-CENTRAL range.
  • UK Cloud Scanners: A group of scanners from the EU-WEST-2 (London) range.
  • APAC Cloud Scanners: A group of scanners from the following three AWS ranges:
    • AP-SOUTHEAST-1 (Singapore)
    • AP-SOUTHEAST-2 (Sydney)
    • AP-NORTHEAST-1 (Tokyo)

The following table identifies each Tenable.io regional cloud sensor and, for whitelisting purposes, its IP address ranges. These IP address ranges are exclusive to Tenable.

Sensor

IP Range

IPv6 Range

Amazon CA-CENTRAL-1 (Canada)

35.182.14.64/26

3.98.92.0/25

2600:1f11:622:3000::/56

Amazon US-EAST (Ohio or Virginia)

13.59.252.0/25

54.175.125.192/26

34.201.223.128/25

3.132.217.0/25

18.116.198.0/24

44.192.244.0/24

2600:1f16:8ca:e900::/56

2600:1f18:614c:8000::/56

Amazon US-WEST (California or Oregon)

54.219.188.128/26

13.56.21.128/25

34.223.64.0/25

44.242.181.128/25

3.101.175.0/25

35.82.51.128/25

2600:1f1c:13e:9e00::/56

2600:1f14:141:7b00::/56

Amazon EU-CENTRAL (Frankfurt)

54.93.254.128/26

18.194.95.64/26

3.124.123.128/25

3.67.7.128/25

2a05:d014:532:b00::/56

Amazon EU-WEST (London)

35.177.219.0/26

3.9.159.128/25

18.168.180.128/25

18.168.224.128/25

2a05:d01c:da5:e800::/56

Amazon AP-SOUTHEAST (Singapore)

54.255.254.0/26

18.139.204.0/25

13.213.79.0/24

2406:da18:844:7100::/56

Amazon AP-SOUTHEAST (Sydney)

13.210.1.64/26

3.106.118.128/25

3.26.100.0/24

2406:da1c:20f:2f00::/56

Amazon AP-NORTHEAST-1 (Tokyo)

13.115.104.0/24

35.73.219.128/25

2406:da14:e76:5b00::/56

Scan ranges may also be grouped into the following categories:

Sensor

IP Range

IPv6 Range

APAC Cloud Scanners

54.255.254.0/26

18.139.204.0/25

13.210.1.64/26

3.106.118.128/25

13.115.104.0/24

35.73.219.128/25

13.213.79.0/24

2406:da18:844:7100::/56

2406:da1c:20f:2f00::/56

2406:da14:e76:5b00::/56

Tip: In addition to the above listed IP address ranges, add the following for internal scanner or agent communications:

  • 162.159.129.83/32

  • 162.159.130.83/32
  • 2606:4700:7::a29f:8153

  • 2606:4700:7::a29f:8253

  • *.cloud.tenable.com with the wildcard character (*) to allow cloud.tenable.com and all subdomains, such as sensor.cloud.tenable.com