Specifications

12-7
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 12 Configuring Network Scanning
Load Nessus Plugins into the Clean Access Manager Repository
If a plugin you want to add has dependent plugins, you must load those dependencies or the plugin is not
applied. When customizing a plugin, Cisco recommends giving the plugin a unique name, so that it is
not overwritten later by a plugin in a Nessus update set.
The plugin’s description appears in the Plugins form of the Scan Setup submenu (Figure 12-4 on
page 12-8). By customizing the plugin’s description, you enable admin console users to distinguish the
plugin from others in the plugin set.
Plugins that you have loaded are automatically published from the Clean Access Manager repository to
the Clean Access Servers, which perform the actual scanning. The CAM distributes the plugin set to the
Clean Access Servers as they start up, if the CAS version of the plugin set differs from the CAM version.
Uploading Plugins
1. Go to Device Management > Clean Access > Network Scanner > Plugin Updates.
Figure 12-3 Plugin Updates
2.
With the plugin file in a location accessible to the computer on which you are working, click the
Browse button next to the Manual Update field and navigate to the plugin archive file
(plugins.tar.gz) or individual plugin file (myplugin.nasl).
Note The filename of the uploaded nessus plugin archive must be plugins.tar.gz. Most Nessus 2.2
plugins are supported. Nessus version 2.2.7 has a NASL_LEVEL value of less than 3004. Cisco
NAC appliance does not support Nessus plugins which require the NASL_LEVEL to be equal
to or greater than 3004. Cisco NAC Appliance currently does not support Nessus version 3
plugins due to vendor licensing restrictions.
3. Click Upload.
4. The list of plugins loaded to the repository displays under Network Scanner > Scan Setup >
Plugins (Figure 12-4).