Can you do a Nessus vulnerability scan to a remote Anyconnect client ?

[martinsm1]

We have an ASA 5525-X ver 9.8 and Anyconnect 4.8. SSL Webvpn.

When a remote vpn client is connected, we try to run a Nessus vulnerability scan of the remote vpn client.

This Nessus scanner is behind the ASA on our internal network. The scanner acknowledges that the remote vpn client does answer with general identity info, such as host name, OS, and IP, but will not allow a vulnerability scan to be done.

Is it possible to do a Nessus vulnerability scan to a remote vpn client through a SSL vpn tunnel?

[omz]

Hi 

Scans over VPN are not recommended - 

https://community.tenable.com/s/article/Can-I-scan-my-remote-network-via-a-VPN

hope this helps 

[Sheraz.Salim]

you have to make sure the nessus is added in nat exemption rules. curious why you needed this. if you have a Firepower module you can use the passive network discovery to see the vulnerabilities.

[martinsm1]

We are not using NAT for VPN addressing. Our IA scanning group is required to do an outside vulnerability scan.