Skip to main content
To deploy the Tenable sensor for Microsoft Azure
  1. Log into Microsoft Marketplace, and search for Tenable.
    Azure Marketplace
  2. Select Tenable Core + Tenable Nessus (BYOL).
  3. Click Create.
    Azure Create Tenable Core
  4. Enter a Virtual Machine Name, and review the populated information.
  5. Click Review + Create.
    Azure Create VM
  6. Adjust the rest of the configuration according to the VM’s authentication method.
    Azure Create VM2
  7. Once the validation is passed, you may proceed to create the VM.
    Azure Validation OK
  8. Wait until the deployment is complete.
    Azure Deployment OK
  9. Take note of the Public and Private IP addresses of the deployed VM.
    Azure IP
  10. Connect to the Tenable sensor via SSH.
    Azure Tenable Sensor
  11. Log into cloud.tenable.com to get the Linking Key.
    GCP Tenable Cloud
  12. Click the burger menu, and then select Settings.
    Azure Burgermenu
    Hyper V Tenable Cloud
  13. Select Sensors.
    Hyper V Tenable Cloud Sensors
  14. Click Add Nessus Scanner to view the Linking Key.
    Hyper V Add Nessus Scanner
  15. Copy the Linking Key.
    Hyper V Copy Linking Key
  16. In the Tenable sensor CLI, use the Linking Key to link the Tenable sensor. 
    sudo /opt/nessus/sbin/nessuscli managed link --key=”Linking Key” –cloud
    Azure Tenable Sensor Link
    Once done, you should see a “Successfully linked” message.
  17. Return to the Tenable cloud page, and verify that the Tenable sensor is linked correctly and is in Online status.
    Azure Sensor Online
    Azure Sensor Online2
VERIFICATION / TROUBLESHOOTING
  • If the sensor does not link properly:
  • If the scans do not find hosts:
    • Confirm that the scanner can reach the target network (routing, security groups/NSGs, and target host firewalls).
    • For credential scans, confirm that the credentials work and the required auth ports are reachable.