Preconfigured Advanced Settings

Certain Tenable-provided Nessus Scanner templates include preconfigured advanced settings, described in the following table. The preconfigured advanced settings are determined by both the template and the Mode that you select.

Template Scan Type Preconfigured Settings
Vulnerability Scans (Common)
Advanced Network Scan – All defaults
Basic Network Scan Default (default)

  • Performance options:

    • 30 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 5 second network read timeout

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials

  • Performance options:

    • 30 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 5 second network read timeout

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Scan low bandwidth links

  • Performance options:

    • 2 simultaneous hosts (max)
    • 2 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Custom

All defaults

Credentialed Patch Audit Default (default)

  • Performance options:

    • 30 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 5 second network read timeout

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Scan low bandwidth links

  • Performance options:

    • 2 simultaneous hosts (max)
    • 2 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Custom

All defaults

Host Discovery – –
Internal PCI Network Scan Default (default)

  • Performance options:

    • 30 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 5 second network read timeout

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Scan low bandwidth links

  • Performance options:

    • 2 simultaneous hosts (max)
    • 2 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Custom

All defaults

Legacy Web App Scan

Default (default)

  • Performance options:

    • 30 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 5 second network read timeout

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Scan low bandwidth links

  • Performance options:

    • 2 simultaneous hosts (max)
    • 2 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Custom

All defaults

Mobile Device Scan – Debug Settings defaults
PCI Quarterly External Scan Default (default)
  • Performance options:
    • 20 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected
Scan low bandwidth links

  • Performance options:

    • 2 simultaneous hosts (max)
    • 2 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Custom
Configuration Scans    
Audit Cloud Infrastructure – Debug Settings defaults
MDM Config Audit – –
Offline Config Audit – Debug Settings defaults
Policy Compliance Auditing Default (default)

  • Performance options:

    • 30 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 5 second network read timeout

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Scan low bandwidth links

  • Performance options:

    • 2 simultaneous hosts (max)
    • 2 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Custom

All defaults

SCAP and OVAL Auditing Default (default)

  • Performance options:

    • 30 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 5 second network read timeout

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Scan low bandwidth links

  • Performance options:

    • 2 simultaneous hosts (max)
    • 2 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Custom

All defaults

Tactical Scans
Badlock Detection – All defaults
Bash Shellshock Detection – All defaults

DROWN Detection

– All defaults
Intel AMT Security Bypass – All defaults
Malware Scan Default (default)

  • Performance options:

    • 30 simultaneous hosts (max)
    • 4 simultaneous checks per host (max)
    • 5 second network read timeout

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Scan low bandwidth links

  • Performance options:

    • 2 simultaneous hosts (max)
    • 2 simultaneous checks per host (max)
    • 15 second network read timeout
    • Slow down the scan when network congestion is detected

  • Asset identification options:

    • Create unique identifier on hosts scanned using credentials
Custom

All defaults

Shadow Brokers Scan – All defaults
Spectre and Meltdown Detection – All defaults
WannaCry Ransomware Detection – All defaults