📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Nessus Scanner

Bring your Tenable Nessus scan results into Lavawall so every vulnerability is matched to the devices you already manage.

Where to find it
Reports › Nessus Upload
Who can use it
Anyone who can see the page; a company must be selected to upload scans or set up email intake
Plan
Vulnerability assessment
For
Everyone

What the page is for

The Nessus Scanner page imports scan exports from Tenable Nessus (the .nessus file) and turns them into a list of hosts and vulnerabilities you can browse. Each scanned host is matched to a computer Lavawall already knows about, either from the Lavawall agent or from a LAN network scan, so you can see which device a finding belongs to.

Nessus is optional. Lavawall works without it; importing scans adds the vulnerability scan sections to the Cybersecurity Assessment report.

You can upload files by hand, or give each company its own email intake address so your scanner can email its exports straight into the console. Only senders you approve are accepted.

Imported scans feed the vulnerability sections of the Cybersecurity Assessment report.

What you see

The Nessus Scanner page, with the upload nessus scan, email scan intake, scans, by device / by vulnerability tabs and details numbered 1 to 5.
The Nessus Scanner page. Numbers match the list below.
  1. Upload Nessus Scan: choose the scan type, add an optional description and notes, then drop in a .nessus file.
  2. Email Scan Intake: a per-company email address that accepts scan exports from approved senders, with a log of recent messages.
  3. Scans: every uploaded scan for the company, with its type (LAN, WAN or Other), date, critical and high counts, and host count.
  4. By Device / By Vulnerability tabs: results for the selected scan, grouped by host or by vulnerability, with a Full Report button.
  5. Details: click a host or vulnerability to see the synopsis, solution, CVEs, CVSS scores, exploit status and affected hosts.

How to upload a scan

  1. Select the company in the company picker at the top of the console.
  2. In Upload Nessus Scan, choose a Scan Type: Detect automatically, LAN (Internal) Scan, WAN (External) Scan or Other.
  3. Optionally enter a Description and Notes.
  4. Drag a .nessus file onto the drop area, or click it to browse. The upload starts as soon as you pick the file.
  5. When processing finishes, the scan appears in the Scans list.

How to review results

  1. Click a scan in the Scans list. The most recent scan opens automatically when you arrive.
  2. On By Device, review each host's OS, matched device, CVSS score and counts of Critical (C), High (H), Medium (M) and Low (L) findings.
  3. On By Vulnerability, review each finding's severity, plugin, family, CVSS, number of hosts, affected devices and whether an exploit is known.
  4. Click a row to open Details.
  5. Click Full Report to open the Cybersecurity Assessment.

How to set up email intake for a company

  1. Select the company, then click Toggle on Email Scan Intake to expand it.
  2. Click Create intake address.
  3. Under Allowed senders, enter a full address (scanner@example.com) or a whole domain (@example.com) and click the + button. Nothing is accepted until at least one sender is listed.
  4. Choose the Scan type for imported scans.
  5. Click Copy and paste the address into your scanner's email report settings.
  6. Use Accept mail at this address to pause or resume intake without deleting it.

How to delete a scan

  1. In the Scans list, click the red delete button on the scan.
  2. Confirm Delete Scan?. All hosts and vulnerability data from that scan are removed.

Tips

  • A red WAN badge marks an internet-facing host or finding. Deal with these first.
  • An EXPLOIT badge means a public exploit is known for that vulnerability.
  • A host badge shows the matched Lavawall device; a blue badge means it was identified from a LAN network scan, and Unmatched means no device was found in inventory.
  • Informational findings are left out of the By Vulnerability list.
  • Who is emailed when a scan arrives by email is set per person in Notification Setup, under Vulnerability scanning.

Troubleshooting

  • "Please select a company before uploading a Nessus scan file." Pick a single company in the company picker first. The same applies to email intake.
  • "File exceeds 100 MB limit." Only .nessus files up to 100 MB can be uploaded. Split the scan or reduce its scope.
  • A scanner email shows "rejected" in Recent messages. The sender is not on the allowed list, or intake is switched off. Add the sender and ask for the report to be sent again.
  • A message shows "error" and "resend needed". Emailed files are not kept after processing, so the sender must send the scan again.
  • Upload failed with a session message. Reload the page and try again; the page retries once automatically.

Task guides that use this page

Still need help?

Search the support centre, or contact our support team and tell us which page you were on.

Names, companies, devices and figures in the pictures are examples. Other product and company names are trademarks of their respective owners.

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.