A Nessus plugin tarball typically contains:
sudo /opt/nessus/sbin/nessuscli update all-2.0.tar.gz
Before updating plugins, stop the Nessus daemon to avoid file lock issues:
# On systemd-based Linux
sudo systemctl stop nessusd
download nessus-update-plugins all-2.0.tar.gz download nessus-update-plugins all-2.0.tar.gz
This command string usually appears in one of two contexts:
Let’s break down the components:
The “all-2.0” archive is a complete plugin snapshot – ideal for: Let’s break down the components:
It includes all Nessus plugins (family, individual, and custom) bundled in Tenable’s proprietary format.
Step 1 – Transfer the file to the offline scanner
Use a USB drive, SCP over a jump server, or a secure CD-ROM. Copy the tarball to a temporary directory, e.g., /tmp/.
Step 2 – Locate the Nessus CLI
Nessus installations typically place the update tool here: The “all-2
Step 3 – Apply the update
sudo /opt/nessus/sbin/nessuscli update /tmp/nessus-update-plugins-all-2.0.tar.gz
You will see output similar to:
[info] Extracting plugins...
[info] Plugins extracted successfully.
[info] Compiling plugins...
[info] Update complete. Restart Nessus to apply changes.
Step 4 – Restart Nessus
sudo systemctl restart nessusd # Linux systemd
sudo /etc/init.d/nessusd restart # SysV init
net stop "Tenable Nessus" && net start "Tenable Nessus" # Windows
Step 5 – Verify the update
Log into the Nessus web UI (port 8834). Go to Settings → About → Plugins. The “Plugin Date” should reflect the timestamp from your tarball.
Now that you have downloaded nessus-update-plugins-all-2.0.tar.gz, let’s apply it to your offline scanner.