[CDP-development] [OregonSIRT] (FINAL UPDATE) Tenable Security Center/Nessus/Nessus Agent not properly functioning - New Ticket Logged [IN-0024132]

Thu Jul 3 08:10:12 PDT 2025

Thank you for contacting the Service Desk on 7/3/2025 08:10 AM.

Your ticket has been logged with ID 0024132.

Thank you.

Service Desk
Oregon Water Resources Department

If you have any additional details, you may reply to this email.

Submit a new ticket or check your ticket status at the Halo User Portal<https://portal-owrd.haloitsm.com/home>

Agent Use:

Assign To #Aagentname   Close #C   Private Note #P   Add Time #T0.0#
________________________________
From: OregonSIRT <oregonsirt-bounces at omls.oregon.gov> on behalf of CSS Security Operations Services * DAS via OregonSIRT <oregonsirt at omls.oregon.gov>
Sent: Thursday, July 3, 2025 3:09:50 PM
To: GOERGEN Brian * DAS <Brian.GOERGEN at das.oregon.gov>
Cc: oregonsirt <oregonsirt at omls.oregon.gov>; cdp-development at omls.oregon.gov <cdp-development at omls.oregon.gov>; DAS_DL_OSCIO_ESO <DAS_DL_ESO at das.oregon.gov>; ent_sec_ops at listsmart.osl.state.or.us <ent_sec_ops at omls.oregon.gov>; ent_cyber_stf at listsmart.osl.state.or.us <ent_cyber_stf at omls.oregon.gov>
Subject: [OregonSIRT] (FINAL UPDATE) Tenable Security Center/Nessus/Nessus Agent not properly functioning

Good morning-
Please provide a description of the issue: Certain agencies are not able to complete a Tenable Scan using either Agents or Nessus Scanners
Has this service worked before? Yes
If yes, when was the last time it worked? June 18, 2025
Please provide an estimate of how many users are impacted: Majority of state agencies
Service affected: Tenable Security Center, Nessus Scanners, Nessus Agents
Any other information or device details:
UPDATE #1: Tenable has provided a possible solution and we will be testing it out today and will provide results to Tenable, if not successful, we will be in contact with Tenable to have another troubleshooting session.

UPDATE #2: We tried Tenable solution and were unsuccessful. They have requested a diagnostic file which we have sent. We are awaiting further information from Tenable.

UPDATE #3: We have narrowed down to scanners not listening on TCP 8834 via IPv4 as a possible issue. Tenable provide another possible fix action, which we tried and were unsuccessful. Reaching out to Tenable for further troubleshooting. Also, we are beginning to rebuild scanners as a stopgap and CSS will be reaching out to schedule those times.

UPDATE#4: CSS has determined that rebuilding scanners is the best path forward. We are working with DCS (for Virtual Scanners) and agencies (for Physical Scanners) to get dates/times scheduled to rebuild scanners.
CSS SOC VM Team is currently working with Tenable Support Team, CSS Network Security, DCS Teams (and any other team that is helping troubleshoot and fix this).
This is currently affecting the following agencies consuming Tenable Security Center/Nessus/Nessus Agent services:
Administrative Services, Department of (DAS IT)
Agriculture, Oregon Department of (ODA)
Construction Contractors Board (CCB)
Employment Department (OED)
Fire Marshal, Oregon State (OSFM)
Higher Education Coordinating Commission (HECC)
Housing and Community Services Dept, Oregon (HCS)
Human Services, Department of (DHS)
Nursing, Oregon State Board of (OSBN)
Parks and Recreation, Oregon Department of (OPRD)
Public Defense Commission, Oregon (OPDC)
Public Utility Commission (PUC)
Business Development Department, Oregon (OBDD)
Dentistry, Oregon Board of (OBD)
Early Learning & Care, Dept of (DELC)
Emergency Management, Oregon Dept of (OEM)
Environmental Quality, Department of (DEQ)
Fish and Wildlife, Oregon Department of (ODFW)
Geology and Mineral Industries, Dept. of (DGMI)
Labor and Industries, Bureau of (BOLI)
Land Conservation and Development, Dept. of (DLCD)
Lands, Department of State (DSL)
Liquor Control Commission, Oregon (OLCC)
Marine Board, Oregon State (OSMB)
Medical Board, Oregon (OMB)
Public Employees' Retirement System (PERS)
Racing Commission (ORC)
Transportation, Oregon Department of (ODOT) /
Aviation, Department of (ODA)
Youth Authority, State of Oregon (OYA)
Long Term Care Ombudsman (LTCO)
Patient Safety Commission, Oregon (OPSC)
Architect Examiners, Oregon State Board of (ORBAE)
Landscape Contractors Board, Oregon (OLCB)
Medical Imaging, Oregon Board of (OMBI)
Mortuary and Cemetery Board, Oregon (OMCB)
Naturopathic Medicine, Oregon Board of (OBNM)
Occupational Therapy Licensing Board (OTLB)
Pharmacy, Oregon Board of (OBOP)
Physical Therapists Licensing Board, Oregon (OPTLB)
Speech-Language Pathology & Audiology, Bd of (BSPA)
Veterinary Medical Examining Board, Oregon (OVMEB)

Cyber Security Services
State of Oregon Cyber Security Services
Enterprise Information Services | SOC
Cyber Security Services (CSS)
SOC Hotline: (503) 378-5930 | SOC Services (503)373-0378
[cid:image003.png at 01DBE67A.80333600] [cid:image002.png at 01DBE674.115109C0]

Cyber Security Services
Enterprise Information Services
Cyber Security Services | CSS
PH: SOC Hotline: (503) 378-5930 | SOC Services (503) 373-0378
[cid:image001.png at 01DBE674.115109C0] [cid:image002.png at 01DBE674.115109C0]

Level 3 - Restricted

Level 3 - Restricted

Level 3 - Restricted

Level 3 - Restricted

Level 3 - Restricted

Level 3 - Restricted
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20250703/cffe8dcb/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 26805 bytes
Desc: image001.png
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20250703/cffe8dcb/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 32625 bytes
Desc: image002.png
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20250703/cffe8dcb/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 280765 bytes
Desc: image003.png
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20250703/cffe8dcb/attachment-0005.png>