Tenable Nessus Compliance Auditing Plugins
While all of the compliance plugins are part of the Policy Compliance family, these other plugins can provide additional useful information about the target or about credentialed login success. Tenable suggests using these following plugins alongside discovery plugins.
Note: Remember to enable the entire policy compliance family.
Tip: Click on a plugin number to view a full description on the Tenable Plugins site.
Plugin ID | Description | Plugin Family | Host Discovery? |
---|---|---|---|
10287 | Traceroute Information | General | Yes |
11936 | OS Identification | General | Yes |
12053 | Host Fully Qualified Domain Name (FQDN) Resolution | General | Yes |
11933 | Do Not Scan Printers | Settings | Yes |
19506 | Nessus Scan Information | Settings | Yes |
33813 | Port Scanner Dependency | Settings | Yes |
21745 | OS Security Patch Assessment Failed | Settings | No |
24786 | Nessus Windows Scan Not Performed with Admin Privileges | Settings | No |
10394 | Microsoft Windows SMB Log In Possible | Windows | No |
10400 | Microsoft Windows SMB Registry Remotely Accessible | Windows | No |
10428 | Microsoft Windows SMB Registry Not Fully Accessible Detection | Windows | No |
24269 | WMI Available | Windows | No |
26917 | Microsoft Windows SMB Registry: Nessus Cannot Access the Windows Registry | Windows | No |