iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
To scan an Ubuntu system with Nessus, install the Tenable Nessus Debian package as root, start the nessusd service, open the web console on port 8834, complete activation, and create a scan from an appropriate template. An unauthenticated scan shows what the host exposes over the network; an SSH credentialed scan can also inspect installed packages and local configuration.
What Nessus does on Ubuntu
Nessus is a vulnerability scanner that runs as a service on a scanner host and checks systems you are authorized to assess. The scanner can enumerate reachable network services without logging in, or use SSH credentials to perform deeper checks on an Ubuntu host. The two modes answer different questions:
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errors- Unauthenticated network scanning: What ports, protocols, and externally visible services can another system reach?
- Credentialed Linux scanning: What software, packages, settings, and local security conditions exist after Nessus logs in?
A practical assessment often starts with discovery and an appropriate scan template, then adds an SSH credentialed scan when you need host-level evidence. Nessus does not make an Ubuntu server safe merely by running a scan; findings still require validation, prioritization, and remediation.
Ubuntu versions and hardware supported by Nessus 10.12
Check the target release and scanner architecture before downloading a package. Tenable’s Nessus 10.12 compatibility list distinguishes x86_64 from AArch64 support:
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
| Ubuntu release | x86_64 | AArch64 |
|---|---|---|
| 16.04 | Supported | Not listed |
| 18.04 | Supported | Supported |
| 20.04 | Supported | Supported |
| 22.04 | Supported | Supported |
| 24.04 | Supported | Supported |
The matrix is a compatibility statement, not a promise of a particular scan speed or detection rate. If your Ubuntu release or CPU architecture is absent, do not assume the package is supported; verify the current Tenable matrix before deployment.
Prepare the Ubuntu scanner
Confirm the release and architecture
Run these commands on the machine where Nessus will be installed:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
uname -m
grep '^PRETTY_NAME=' /etc/os-releaseuname -m normally reports x86_64 for an Intel or AMD 64-bit installation and an AArch64 system normally reports aarch64. Compare both results with the support table rather than selecting a package solely by the Ubuntu version.
Plan network placement and authorization
- Install the scanner where it can reach the approved targets over the required network paths.
- Record the target addresses and the test window before launching scans.
- Obtain a Nessus package and the activation code needed for your edition.
- Use scans only against systems for which you have explicit authorization. Discovery and vulnerability plugins can generate traffic and may affect fragile services.
For a remote browser connection, allow access to the scanner’s TCP port 8834 only from trusted administration networks. Local access uses https://localhost:8834; remote access uses the scanner host’s IP address with the same port.
Install Nessus on Ubuntu
1. Obtain the Debian package
Download the Ubuntu/Debian package that matches the scanner architecture and the Nessus release you intend to run. Keep the filename intact; Tenable’s documented pattern is Nessus-<version number>-debian6_amd64.deb for the 64-bit Intel/AMD package. Transfer the file to the Ubuntu host using your organization’s approved method and note its directory.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
2. Install with root privileges
Tenable documents command-line installation with root privileges. From the directory containing the package, run:
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →sudo dpkg -i Nessus-<version number>-debian6_amd64.debIf you are already working in a root shell, omit sudo. The package installation creates the Nessus service and places its program files on the system. If dpkg reports a package or dependency problem, stop and resolve that operating-system error before attempting a scan; do not treat a partially installed service as ready for production use.
3. Start the nessusd service
Start the daemon with:
sudo systemctl start nessusdThe service must be running before the web interface can respond. If the command returns an error, inspect the service state and system logs, correct the underlying package, permission, or port issue, and start it again. A successful start does not complete activation; the browser setup is still required.
4. Complete the initial web configuration
- On the scanner itself, open
https://localhost:8834. From another authorized machine, replacelocalhostwith the scanner host IP address and retain port8834. - Follow the first-run prompts to select the Nessus edition, create the administrator account, and enter the activation code.
- Allow the initial plugin and component setup to finish before creating a scan. Interrupting that process can leave the installation without the content needed to evaluate vulnerabilities.
- Sign in again if the interface restarts the service or asks for a fresh session.
Your browser may warn that the initial HTTPS certificate is not trusted. Verify that you are connected to the intended scanner host and handle the warning according to your organization’s certificate policy; do not bypass a warning on an unknown host.
Run your first Ubuntu scan
1. Discover hosts when the scope is not yet known
Use a host-discovery scan when you need to establish which approved addresses are alive. Keep the scope narrow enough to avoid accidentally probing systems outside the authorization boundary. Discovery can identify responsive hosts, but it is not a substitute for a vulnerability scan and does not provide the package or configuration evidence available through SSH.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
2. Create a scan from the Nessus interface
Tenable’s interface sequence is:
- Open Scans.
- Select New Scan.
- Choose a template that matches the assessment, such as a general network assessment or a host-oriented Linux check when that option is available in your installation.
- Configure the scan settings.
- Choose Launch to run it immediately, or Save to review and schedule it later.
The exact fields depend on the template. Common settings include the scan name, target addresses, optional live results, credentials, compliance audits, and plugin selections.
3. Define targets precisely
Enter only the IP addresses, hostnames, or ranges that are in scope. Recheck CIDR ranges and exclusions before launching; a typo can expand a scan from one Ubuntu server to an entire network segment. For a first test, use one non-production host, confirm the results, and then widen the scope under the same authorization.
4. Choose options deliberately
- Live results: Enable them when you need to watch findings as the scan progresses; leave them off if your workflow requires reviewing a completed result.
- Credentials: Add SSH credentials only after the target account and privilege path have been tested.
- Compliance audits: Select an audit only when its policy and evidence requirements match your engagement.
- Plugins: Keep the template’s default selection unless you understand why a plugin family should be added or excluded. Exclusions can remove evidence you expected to collect.
Save a copy of the settings or record them in your change documentation. Reproducible configuration makes it easier to explain why two scans produced different results.
5. Launch and monitor
Start the scan only after confirming the targets, credentials, and maintenance window. Watch for unreachable hosts, authentication errors, or an unexpectedly broad target list. If the scan must be stopped, use the interface’s stop control and document which hosts were completed; a partial result should not be presented as a complete assessment.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Configure a credentialed SSH scan on Ubuntu
An unauthenticated scan sees the attack surface from the network. A credentialed Linux scan can inspect local packages and configuration, so its accuracy depends on the account and privilege path you provide.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Create a dedicated scan account
Tenable recommends a dedicated account on each target. Avoid using a personal administrator identity that is shared with other work. Give the account only the permissions required by your approved scan policy, and remove or disable it when the engagement ends.
Select an SSH authentication method
Nessus supports either a private/public key pair or user credentials. In the scan’s credentials section, select SSH and provide the method your target policy permits:
- Key-based authentication: Supply the private key for the dedicated account and ensure the corresponding public key is authorized on the Ubuntu target.
- Password authentication: Supply the dedicated account’s username and password when password-based SSH is enabled and allowed by policy.
Protect private keys and passwords as secrets. Do not paste them into scan names, notes, target fields, or exported reports.
Provide privilege escalation
For local security checks, configure the account to use either sudo or su, as permitted by the target’s security policy. The scan must be able to execute the checks that require elevated privileges. A successful SSH login without the required escalation can produce a result that looks complete while omitting local evidence.
Use a narrowly scoped sudo policy where feasible, test it with the dedicated account, and record any restrictions that could explain missing findings. If your policy forbids elevation, run an unauthenticated scan and state that limitation rather than implying that the host was fully inspected.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Check the target shell prompt
The target shell must expose a PS1 variable containing four or more characters. Tenable warns that a shorter prompt can drastically increase total scan time. Check the account’s non-interactive and interactive shell behavior before launching a large scan, and coordinate any profile change with the system owner. A prompt that is valid for an administrator’s terminal is not automatically valid for the shell session Nessus receives.
Validate the credentialed path with one host
- Confirm that the scanner can reach the target’s SSH service.
- Confirm that the dedicated account can log in using the selected key or password.
- Confirm that the account can use the configured
sudoorsupath without an unexpected interactive prompt. - Run the credentialed scan against one test host.
- Review the scan evidence for package and local-configuration checks before expanding the target list.
This staged approach separates network reachability problems from account, key, privilege, and shell-prompt problems.
Unauthenticated versus credentialed Ubuntu scans
| Decision area | Unauthenticated network scan | Credentialed Linux scan |
|---|---|---|
| Visibility | Enumerates network services and the externally reachable attack surface. | Adds package, local configuration, and host-level security checks. |
| Access requirements | No login to the target host. | SSH access plus a private/public key or user credentials, and sudo or su when required. |
| Operational impact | Simple to deploy once routing and scope are approved. | Requires account creation, key or password handling, privilege management, and shell validation. |
| Coverage and confidence | Strongest for externally observable exposure; cannot directly verify many local conditions. | Provides deeper host-level evidence when authentication and privileges work as configured. |
| Deployment scale | One scanner can reach many targets without per-host accounts. | Each target needs working credentials and an approved access path, increasing administration as the fleet grows. |
These modes are complementary, not competing replacements. Use the unauthenticated view to understand exposure and the credentialed view to verify what is actually installed and configured.
Review findings and export evidence
When a scan finishes, open its results and inspect each finding’s affected host, plugin output, and supporting evidence. Confirm that the result belongs to the intended target and that the scan was authenticated when the finding depends on local checks. A credential failure, unreachable host, or excluded plugin can explain why an expected issue is absent.
Use the interface’s report or export function when you need to share results or retain an audit record. Preserve the scan name, date, target scope, template, credentialed status, and any exclusions alongside the exported report so a reader can interpret its coverage. Remove secrets and restrict report access because vulnerability output can reveal sensitive system details.
Troubleshoot common Ubuntu Nessus problems
The browser cannot connect to port 8834
- Confirm that the
nessusdservice was started after installation. - Check that you are using
https://and port8834, not an HTTP URL or a different port. - For remote administration, verify routing and firewall rules between your workstation and the scanner host.
- Try local access with
https://localhost:8834to distinguish a service problem from a network-access problem.
dpkg rejects the package
Recheck the Ubuntu release, CPU architecture, downloaded filename, and file integrity. An x86_64 package is not the correct choice for an AArch64 scanner. Resolve any package-manager error reported by Ubuntu, then rerun the installation rather than proceeding with a service that did not install cleanly.
The scan reports an SSH authentication failure
- Verify the target address and SSH reachability from the scanner.
- Check the username, key or password, and the target account’s authorized-key configuration.
- Confirm that the SSH daemon permits the authentication method you selected.
- Test the configured
sudoorsupath separately; login success alone does not prove that local checks can run.
The credentialed scan is unusually slow
Check the target shell’s PS1 value first. Tenable specifically warns that a prompt shorter than four characters can drastically increase total scan time. Also verify that the account is not waiting for an interactive password, privilege, or host-key prompt that the scanner cannot answer.
Results show fewer local checks than expected
Confirm that the scan used a template and plugin selection capable of local Linux checks, that SSH credentials were attached to that scan, and that elevation succeeded. Compare the result with a single known test host before changing settings across the fleet. Document any checks that your account policy intentionally prevents.
Quick Recap
Operational practices for repeatable scans
- Keep an inventory of supported Ubuntu releases and architectures so unsupported hosts are not silently included.
- Use a dedicated scan account per target or per approved group, with controlled key rotation and privilege rules.
- Separate discovery, unauthenticated assessment, and credentialed assessment when their scopes or maintenance windows differ.
- Start with a pilot host after every package, template, credential, or policy change.
- Record the template, target list, plugin choices, credentials mode, exclusions, and scan date with each report.
- Schedule scans in a window appropriate for the target’s workload, and notify service owners when scanning could affect sensitive systems.
- Retest remediated findings using the same relevant scan mode so the before-and-after evidence is comparable.
Quick procedure checklist
- Verify the Ubuntu release and architecture against the Nessus 10.12 support list.
- Obtain the matching Debian package and activation code.
- Install it as root with
dpkg -i. - Start
nessusdwithsystemctl start nessusd. - Open the web console on port 8834 and complete activation.
- Run discovery if the approved host inventory is incomplete.
- Go to Scans → New Scan, select a suitable template, set targets, and configure options.
- For deeper Ubuntu checks, attach dedicated SSH credentials and a tested
sudoorsupath. - Verify the target shell exposes a
PS1variable of at least four characters. - Launch against one host, review evidence, then expand to the approved scope.
- Export and protect the report, retaining the settings needed to interpret its coverage.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
