u/Inner_Resolution_801

Hi,

How have you guys set up Tenable to scan multiple Azure VMs for your clients? Do you use the Microsoft One-Click Nessus Extension and run agent-based scans, or do you think Credentialed Scan is the way to go?

I have been looking into the official documentation, but I don't seem to find anything indicating which way is best for Azure VMs. Outside of official documentation, I have seen people advocating for the agent-based scans, but at the same time, people say that the best way to get real results would be to scan from outside with a credentialed scan.

What do you think is the best way? Thanks for all the help.