Nessus - How to do full port Scan + Installation steps for nessus

Add Comment

For Installing Nessus on your machine:- 

=> For installing Nessus on your machine or on kali there are many blog but this blog scope is to show you how to do full port scan so i have shared few blog link for installation of Nessus.

I Strongly recommend you to install Nessus on VM machine, but WHY ? At the end of this blog i explained.

Then to if you find any problem you can comment below, ill make separate blog for that :)

Link 1         Link 2     Link 3

Full Port Scan using Nessus :-

=> Follow below configuration on your Nessus while doing FULL Port Scan :-

There are two GUI which nessus supports one is html and secound is flash you can use either of them as per your convenience

=> FLASH View

=> HTML View

I will be showing you full port scan by taking FLASH view .

1) In Nessus Go to Policies and click on Add

2) General Setting :-

This step is critical step as you are doing full port scan setting here only
Name : Name of your scan
Visibility : Set it Private (you can set according to client requirement)
Under Port Scanner : Make sure Ping Host and TCP Scan should be unchecked
Under Port Scan Options : Give port Scan range 1-65535

3) Go to Credentials :-
Just skip this step as it is

4) Got to Plugins:-

Under Plugins make sure you disable Denail of Service. 

Note: If client want to test their environment for DOS attack then you need to take permission from respective client then after you can perform this activity.
But i strongly recommend to disable this field while doing full port sacn.

5) Go to Preferences :

Just skip this step as it is and click on Submit button.

Note: While scanning any particular server OR any machine which is password set that time we use this feature where we specifically ask client to put the credentials of machine which we are scanning generally for configuration audit we use this feature

Now at this moment your Full port scan policy is configured .

Lets see how to scan ip address.

Step 1:-  Click on Scans

Step 2 : Under Scans

Give the name , type of Scan which you are performing and policy which you just created

Name: Full port Scan

Type : There are  3 type under this, As we are doing full port scan so we will select Run Now.
           you can select Scheduled or Template as required by you .

Policy : Select the policy which we just created

Step 3: Scanning Ip address

Put the IP address as shown below and then click on Launch Scan.


Few TIPS and NOTES need to remember :- 


Below is few notes which you need to know before scanning ip address

Types of IP address :

Internal Scan :- you are scanning private ip address of the organisation
                       Private ip address include :, and

External Scan:- you are scanning public ip address of the organization

Public IP address vs Private IP address  


I Strongly recommend you to install Nessus on VM machine loaded with Kali linux or backtrack  

Reason 1 : If you are using Home feed version you can only scan 16 IP 
Reason 2 : For scanning more than 16 IP either you need to uninstall nessus again or you require another mail id to generate new registration code 

Now to solve above issue you can refer my blog how we use home feed version of nessus and scan more than 16 IP :)