Discovering Assets

Discovery scans are configured by site, agent, and scope. In order to run a scan against a specific site, an agent must be activated and either assigned to that site or configured for all sites. To launch a discovery scan, browse to the Inventory page and select New Scan from the button in the upper right.

The Scope defines what IP ranges will be scanned. The scope defaults to the Site settings, but may be changed on a per scan basis as well. The scope should include at least one IP address or hostname. IP address ranges can be specified in most standard formats:

  • 10.0.0.1
  • 10.0.0.0/24
  • 10.0.0.0/255.255.255.0
  • 10.0.0.1-10.0.0.255

Hostnames specified in the scope will be resolved at runtime by the assigned agent. If the hostname returns multiple IP addresses, all addresses in the response will be scanned. Hostnames can also have masks applied, indicting that the mask should expand to each resolved address of the hostname. For example, if example.com resolves to both 1.2.3.4 and 5.6.7.8, the input of example.com/24 would become 1.2.3.0/24 and 5.6.7.0/24.

The Advanced Options button can be used to display and modify additional scan settings, such as network exclusions, scan speed, the ports covered by the TCP scan, and which probes are enabled. The default settings should work for most organizations but may need to be tweaked for slow networks or unreliable links.