By default, NIH and the NCI run regular agent-based Nessus scans against all servers within the NIHNetwork. Tenable Nessus scans can also be run by NIH against external IPs/networks that are used to support NIH applications by following these instructions. Before you submit your request, you will need to know or have the following:

When you are ready to schedule the Tenable Nessus scan you should do the following:

1. Email the NCI ISSO (link sends email). to obtain written approval to scan your network(s).  Be sure to specify the IP(s) or IP range(s) you wish to have scanned in order to avoid any ambiguity.

2. Once you have received written approval from the NCI ISSO, send an email to IRT (irt@nih.gov) and ask them to create a new ticket on your behalf. Please be prepared to include the following information in the request:

4. IRT will send notice for the time the scan will start, and when the scan is complete.

Tips