Skip to main content
paul_woods
paul_woods
New Member
April 3, 2018
Question

How to allow Tenable Nessus Cloud scanner scans through the FortiGate

  • April 3, 2018
  • 1 reply
  • 10917 views

Hello,

 

we need to do Nessus scans from the Tenable Nessus cloud scanners through our FortiGate firewalls to a list of externally available servers and services to ensure that they are patched/updated for several compliance regimes.

 

When a scan occurs we get the attached messages in the FortiGate logs.

 

how do we allow the tenable cloud scanner ip ranges to be allowed to get past the intrusion detection system and through the FortiGate firewall?

 

Thanks,

Paul

1 reply

kurtli_FTNT
Staff
kurtli_FTNT
Staff
April 3, 2018

Hi Paul,

    You can bypass nessus scanning by adding an exempt-IP.  

Cli:

config IPS sensor

    ed default

        config entries

          ed 0

                 set rule xxx    e.g. 29844 for eicar 

                 config exempt-ip

                     you can set either src-ip or dest-ip here.

 

end

 

 

thanks

paul_woods
paul_woodsAuthor
New Member
April 4, 2018

Thanks,

 

do I need to add exempt-ip entries for every rule or just once and that would cover all the rules?

 

Thanks,

Paul

ShawnZA
ShawnZA
New Member
April 4, 2018

One entry per IPS sensor, if you use the same IPS sensor for all rules then only one change needed

Terms & ConditionsAccessibility statement