Nessus offline updates allow administrators to keep their vulnerability scanners current without a direct internet connection. This is essential for secure, air-gapped environments. Mastering the Offline Update: Using the Nessus Tar.gz
Keeping your Nessus scanner updated in a restricted network requires a manual touch. While most modern tools rely on a constant "home" connection, high-security environments often use the all-2.0.tar.gz archive to bridge the gap. Why Update Manually? Air-Gapped Security: Protects the scanner from external threats. Regulatory Compliance: Meets strict "no-internet" policy requirements. Controlled Rollouts: Allows teams to test plugin sets before deployment. 🛠️ The Prerequisites Before you start the process, ensure you have: Administrative access to the Nessus host (Linux or Windows). Your unique Challenge Code from the Nessus UI (Settings > Activation Code). A machine with internet access to download the all-2.0.tar.gz 🚀 Step-by-Step Implementation 1. Generate the Download Link
You cannot download the file directly from a static URL. You must visit the Tenable Offline Registration Enter your Challenge Code Enter your Activation Code
Submit to receive the unique download link for the plugin archive. 2. Transfer the File all-2.0.tar.gz
file to your offline Nessus server using a secure method like a hardened USB drive or a cross-domain transfer solution. 3. Execute the Update Use the command line to tell Nessus to ingest the new data. For Linux: /opt/nessus/sbin/nessuscli update all- Use code with caution. Copied to clipboard For Windows: powershell # Run as Administrator C:\Program Files\Tenable\Nessus\nessuscli.exe update all- Use code with caution. Copied to clipboard 4. Restart the Service
After the command finishes, restart the Nessus service to begin the plugin compilation process. Note that the UI may be slow for several minutes while it processes the new definitions. ⚠️ Common Troubleshooting Corrupt Archives: download nessusupdateplugins all20targz new
If the update fails, verify the MD5 hash provided on the download page. Expired Links:
The download link generated by Tenable is temporary. If the download stalls, you must re-generate the link. Disk Space:
Ensure you have at least 5GB of free space, as the plugin expansion process is resource-heavy.
Since "download nessusupdateplugins all-2.0.tar.gz" is technically a command instruction (likely meant for a Linux/Unix terminal) rather than a title of an existing document, I have drafted a Formal Technical Change Management Report.
This report outlines the procedure, risks, and execution steps for manually updating Nessus plugins using the compressed archive file (all-2.0.tar.gz). This is a common task for security administrators managing Tenable Nessus scanners in offline or air-gapped environments. Nessus offline updates allow administrators to keep their
all-20.tar.gz format or newer) and validate its integrity (e.g., checking the file's digital signature).Yes. Use wget -c on Linux:
wget -c https://plugins.nessus.org/v2/nessusupdateplugins_all20.tar.gz
Or use a browser with resume capability.
Tenable is gradually moving toward a linked update model where even offline scanners use a signed update package that doesn’t require the old all-2.0.tar.gz mono-file. However, as of 2025, the challenge-code + tarball method remains fully supported, especially for air-gapped deployments.
If you continue to search for phrases like "download nessusupdateplugins all20targz new", it likely means your organization has a legacy automation script relying on that old filename. We strongly recommend refactoring your script to use the official nessuscli fetch --plugin-update with challenge authentication.
nessuscli update/opt/nessus/sbin/nessuscli update /path/to/nessus-updates-10.7.1.tar.gz
The system will extract and compile the plugins. This may take 5–30 minutes depending on your CPU. Key Components:
Date: October 26, 2023
Subject: Execution of Manual Plugin Update via nessusupdateplugins
Prepared By: Security Operations Team
System: Nessus Scanner (Version 8.x/10.x)
Cause: Using legacy command on Nessus 10+.
Solution: Use nessuscli update <filename> instead of manual extraction.
Tenable provides an MD5 or SHA256 checksum. Validate it:
md5sum nessus-updates-10.7.1.tar.gz
Compare with the checksum shown on the download page.
Manually downloading nessusupdateplugins_all20.tar.gz every week is tedious. For semi-air-gapped environments (networks that can reach a local staging server), set up a cron job:
Script: fetch-nessus-plugins.sh
#!/bin/bash
# Download latest plugin pack from Tenable (requires API key)
API_KEY="your_tenable_api_key"
curl -X GET "https://plugins.nessus.org/v2/nessusupdateplugins_all20.tar.gz" \
-H "X-APIKeys: accessKey=$API_KEY" \
-o /var/local/nessusupdateplugins_all20.tar.gz