ansible-role-tenable-agent

Ansible role for installing and configuring Nessus Agent

Role Variables

Variable	Description
`nessus_agent_key`	key used for linking with nessus host (this is a required variable)
`nessus_agent_group`	host group this agent should be added to when linking with nessus host (this is a required variable)
`nessus_agent_host`	nessus host to link with (default: `cloud.tenable.com`)
`nessus_agent_port`	nessus host port (default: `443`)
`nessus_agent_rules`	Object can be used to configure the nessusd.rules file
`nessus_agent_download_url`	Getting the download URL can be a bit tricky, just go to https://www.tenable.com/downloads/nessus-agents and copy the URL, like in the example below. You need also to download the file and calculate the md5sum. NOTE: The Link is nt
`nessus_agent_package`	can be either a repository package, path to a file, or a URL (default: `NessusAgent`)

NOTE: The Tenable download URLs are not static and they will change. To automatically generate a new list, run

get-package-urls.py >vars/package_url.yaml

Dependencies

None for the Ansible role. To run get-package-urls.py, install the Python bs4 package.

Example Playbook

Simple use case

- hosts: all

  vars:
    nessus_agent_key: xxxxxxxxx
    nessus_agent_file_checksum: "md5:3eeee6531c7822ac7fe374cc28d74779"
    nessus_agent_download_url: "https://www.tenable.com/downloads/api/v1/public/pages/nessus-agents/downloads/12176/download?i_agree_to_tenable_license_agreement=true" # NessusAgent-8.2.2-ubuntu1110_amd64.deb

  roles:
    - role: ansible-role-nessus-agent

Advanced use case

- hosts: all

  vars:
    nessus_agent_key: xxxxxxxxx
    nessus_agent_group: GCP
    nessus_agent_file_checksum: "md5:3eeee6531c7822ac7fe374cc28d74779"
    nessus_agent_download_url: "https://www.tenable.com/downloads/api/v1/public/pages/nessus-agents/downloads/12176/download?i_agree_to_tenable_license_agreement=true" # NessusAgent-8.2.2-ubuntu1110_amd64.deb
    nessus_agent_rules:
      default: accept
      plugin_reject:
        - 33851

  roles:
    - role: ansible-role-nessus-agent