Skip to main content
To deploy the Tenable sensor for Hyper-V
  1. Go to Data Sources > Blue Apps > Available BlueApps tab.
  2. Filter by Scanner, and then select LevelBlue Vulnerability Scanner Powered by Tenable.
  3. On the My Apps tab, click the Tenable Scanner Image link. This directs you to the Tenable Nessus page.
    Hyper V Tenable Link
  4. Under Download and Install Nessus, expand the Virtual Machines section, and select the View Tenable Core + Nessus Virtual Appliance option.
    Hyper V DL Tenable Nessus
  5. Download the zip file (as shown on the screenshot below), and extract the OVA for Hyper-V (OS.vhd file).
    Hyper V Tenable OVA File
  6. Log into Hyper-V Manager.
  7. In the Actions pane, click New to create a new virtual machine (VM).
    Hyper V Create VM
  8. When the New Virtual Machine Wizard opens, click Next to initiate the set up of the new VM.
    Hyper V New VM Wizard
  9. Specify the Name and Location of the VM, and then click Next.
    Hyper V VM Name Loc
  10. Select Generation 1 as the VM generation, and then click Next.
    Hyper V Generation
  11. Assign a memory for the VM, and then click Next.
    Hyper V Memory
    The Startup memory should at least be 8 GB.
  12. Select the VM’s network connection, and then click Next.
    Hyper V Network Connect
  13. Select to Use an existing virtual hard disk.
  14. Click Browse to locate the OS.vhd file that has been downloaded from Tenable.
    Hyper V Virtual HD
  15. Click Next.
  16. Review the VM details, and then click Finish to complete the process.
    Hyper V New VM
  17. In the Tenable Hyper-V Sensor pane, click Start to launch the Hyper-V VM.
    Hyper V Start VM
  18. Verify that the VM is running.
  19. Open the web console of the Tenable sensor.
    Hyper V Web Console
  20. Log into the Tenable sensor using the default credentials: username: wizard / password: admin
    Hyper V Console Login
    Reboot the sensor if you cannot log in and the following error appears: “Logins have been disabled as no administrator account was created within the required time. Reboot the system to access the initial user creation wizard.”
    Hyper V Console Reboot
  21. When prompted to configure a Tenable sensor IP (static address), type y.
    Hyper V Console IP Config
  22. Select the Wired connection option, and then click Edit.
    Hyper V Wired Connect
  23. Click Manual.
    Hyper V Manual Edit
  24. Assign the IP Address, Gateway, and DNS Servers.
  25. Once done, click OK.
    Hyper V IP Config
  26. Click Quit.
    Hyper V Quit Connect
  27. Return to the web console, and when prompted to create an administrator account, type y.
    Hyper V Create Admin Acct
  28. Type a Username and Password for the admin account.
  29. Confirm the password.
    Hyper V Admin Login
  30. Check that the new admin account can log into the Tenable web console.
  31. Using the configured IP, use your web browser to connect to Tenable sensor to port 8000.
  32. Log in using the admin account credentials.
    Hyper V Tenable Core Login
  33. Once you are logged in, you can see the name of the Tenable Sensor. Click Turn on administrative access.
    Hyper V Tenable Dashboard
  34. Click Authenticate.
    Hyper V Authenticate Admin
  35. Check the License of the sensor, and verify that there is no license linking the sensor to the cloud tenant.
    Hyper V Tenable License
  36. Connect to the Tenable sensor using your web browser on port 8834, and then click Continue.
    Hyper V Tenable Login
  37. Select the Link Nessus to another Tenable product option, and then click Continue.
    Hyper V Tenable Link Scanner
  38. Select the Tenable Vulnerability Management option to manage your linked scanner.
  39. Enter the Linking Key. (See Obtain Linking Key section below for details.)
    Hyper V Managed Scanner

    You may get the Linking Key from Tenable cloud:
    • Log into cloud.tenable.com 
      GCP Tenable Cloud
    • Click the burger menu, and then select Settings.
      Azure Burgermenu
      Hyper V Tenable Cloud
    • Select Sensors.
      Hyper V Tenable Cloud Sensors
    • Click Add Nessus Scanner to view the Linking Key.
      Hyper V Add Nessus Scanner
    • Copy the Linking Key.
      Hyper V Copy Linking Key
  40. Once you have entered the Linking Key, click Continue.
  41. Enter a Username and Password to create a Nessus administrator user account.
    Hyper V Nessus User Acct
  42. Click Submit. The sensor’s My Scans page opens.
    Hyper V My Scans
  43. Re-connect to the sensor using a web browser to port 8000, and then check the License of the Tenable sensor.
    V Mware Tenable License Valid
  44. Get the name of the deployed Tenable sensor.
    V Mware Tenable Name
  45. Return to the Tenable cloud page, and verify that the Tenable sensor is linked correctly and is in Online status.
    Hyper V Tenabled Linked Sensor
VERIFICATION / TROUBLESHOOTING
  • If the sensor does not link properly:
  • If the scans do not find hosts:
    • Confirm that the scanner can reach the target network (routing, security groups/NSGs, and target host firewalls).
    • For credential scans, confirm that the credentials work and the required auth ports are reachable.