Skip to main content
To deploy the Tenable sensor for GCP
  1. Log into the Google Cloud Platform (GCP) console.
  2. Navigate to Compute Engine, and then select VM Instances.
  3. Click Create Instance.
    GCP Create Instance
  4. Enter a Name for the Tenable Sensor, and select the checkbox of the instance type.
  5. Click Create.
    GCP Machine Config
  6. Wait until the VM instance is created and listed. It should have a green check status.
    GCP V Mstatus
  7. Connect to the VM instance by clicking the SSH of the created instance.
    GCP V Minstance SSH
    A console opens up after clicking SSH.
    GCP SSH
  8. Check the Linux OS version in the Tenable sensor: 
    cat/etc/os-release
    GCP Linux O Sver
    Based on the screenshot above, the Linux OS is Debian 12.
  9. Get the latest Debian version of the Tenable scanner: 
    wget https://www.tenable.com/downloads/api/v2/pages/nessus/files/Nessus-10.11.3-debian10_amd64.deb
    GCP Debian
  10. Check for the downloaded deb package of the Nessus Tenable scanner.
    GCP Deb Package
  11. Install the deb package using dpkg: 
    # sudo dpkg -I Nessus-10.11.3-debian10_amd64.deb
  12. Install the package.
    GCP Install Pkg
  13. Start the nessusd.service: 
    # sudo /bin/systemct1 start nessusd.service
    GCP Nessus Svc
  14. Enable the nessusd.service: 
    # sudo /bin/systenctl enable nessusd.service
    GCP Enable Nessus Svc
  15. Log into cloud.tenable.com to get the Linking Key.
    GCP Tenable Cloud
  16. Click the burger menu, and then select Settings.
    Azure Burgermenu
    Hyper V Tenable Cloud
  17. Select Sensors.
    Hyper V Tenable Cloud Sensors
  18. Click Add Nessus Scanner to view the Linking Key.
    Hyper V Add Nessus Scanner
  19. Copy the Linking Key.
    Hyper V Copy Linking Key
  20. In the Tenable sensor CLI, use the Linking Key to link the Tenable sensor: 
    sudo /opt/nessus/sbin/nessuscli managed link --key=”Linking Key” –cloud
    GCP Link Tenable Sensor
    Once done, you should see a “Successfully linked” message.
  21. Return to the Tenable cloud page, and verify that the Tenable sensor is linked correctly and is in Online status.
    GCP Sensor Online
VERIFICATION / TROUBLESHOOTING
  • If the sensor does not link properly:
  • If the scans do not find hosts:
    • Confirm that the scanner can reach the target network (routing, security groups/NSGs, and target host firewalls).
    • For credential scans, confirm that the credentials work and the required auth ports are reachable.