To download and install the all-2.0.tar.gz file for Tenable Nessus, you must follow the offline update procedure. This file contains the complete set of Nessus vulnerability plugins and is typically used for air-gapped or restricted-access systems. 1. Generate Challenge and Activation Codes
To obtain the download link, you first need a unique challenge code from your Nessus installation.
Generate Challenge Code: On your offline Nessus system, use the command line: Linux: # /opt/nessus/sbin/nessuscli fetch --challenge
Windows: "C:\Program Files\Tenable\Nessus\nessuscli.exe" fetch --challenge
Locate Activation Code: Find your Nessus activation code in your Tenable Support Portal under "Activation Codes". 2. Obtain the Plugin Download URL
Access a computer with internet connectivity to generate the download link. Go to the Nessus Offline Registration page. Enter your Challenge Code and Activation Code.
Click Submit. The page will provide two links: one for the nessus.license file and one for the plugin archive (all-2.0.tar.gz). 3. Download and Transfer the File Click the provided plugin link to download all-2.0.tar.gz. download nessus-update-plugins all-2.0.tar.gz
Transfer the file to your offline Nessus system using secure removable media (e.g., a USB drive or SFTP). 4. Install the Plugins
You can install the plugins using either the web interface or the command line.
Option A: Command Line Interface (Recommended)Open a terminal or command prompt as an administrator and run the update command: Perform an Offline Nessus Plugin Update
Title: How to Manually Update Nessus Plugins: A Guide to nessus-update-plugins and all-2.0.tar.gz
If you are a Nessus user, you know that keeping your plugin feed updated is critical for detecting the latest vulnerabilities. Usually, Nessus handles this automatically in the background. However, if you are working in a secured environment, an air-gapped network, or troubleshooting a sync error, you might find yourself searching for a specific command:
nessus-update-plugins all-2.0.tar.gz
This command is the "old school" way to manually force an update using a downloaded archive. In this post, we will explain what this file is, how to use it, and the modern alternative you should probably be using today.
Section 6: Troubleshooting Common Download & Installation Errors
Even with the correct file, things go wrong. Here are fixes for the top five issues.
The Role of Nessus Update Plugins
Nessus update plugins are essentially packages that contain new or updated plugins. These plugins enhance the scanner's capability to detect recently discovered vulnerabilities. The updates can include new checks, modifications to existing checks, or even entirely new features. By regularly updating these plugins, users can ensure their Nessus scanner remains effective against the latest threats.
Issue 3: Permission denied when running nessuscli
Cause: Non-root user attempting update.
Fix: Run with sudo (Linux) or as Administrator (Windows). Nessus writes to protected directories.
What is all-2.0.tar.gz?
The file all-2.0.tar.gz is a compressed archive provided by Tenable that contains the complete set of Nessus plugins.
When you run the command nessus-update-plugins all-2.0.tar.gz, you are essentially telling the Nessus scanner: "Stop trying to call home to the internet. Instead, take this specific file I have downloaded, extract it, and install the plugins from it right now." To download and install the all-2
5. Modern Context: Deprecation and nessuscli
It is important to note that nessus-update-plugins is considered a legacy command.
In modern versions of Nessus (version 8 and newer), Tenable consolidated management tools. While nessus-update-plugins might still exist as a symbolic link or wrapper for backward compatibility, the preferred, modern method is using nessuscli.
Legacy Command:
/opt/nessus/sbin/nessus-update-plugins
Modern Command (Manual Online Update):
/opt/nessus/sbin/nessuscli update
Modern Command (Offline Update using the file):
/opt/nessus/sbin/nessuscli update all-2.0.tar.gz
3. How the Update Process Works
When you run nessus-update-plugins, the following sequence occurs: nessus-update-plugins all-2
- Connection: The utility attempts to connect to
plugins.nessus.org(or a configured mirror). - Authentication: If the scanner is registered (Professional or Expert feed), it sends a unique hash/ID to prove it is licensed. If it is a "Home Feed" (deprecated), it used to send a registration code.
- Download: It downloads the latest
all-2.0.tar.gz. - Verification: The utility checks the digital signature or hash to ensure the file hasn't been tampered with.
- Extraction: The utility extracts the archive into the plugin directory (usually
/opt/nessus/lib/nessus/plugins). - Recompilation: The scanner re-indexes the new scripts so the User Interface knows which new vulnerabilities it can now scan for.








Facebook
X
Youtube