Discovery scans are configured by site, agent, and scope. In order to run a scan against a specific site, an agent must be
activated and either assigned to that site or configured for all sites. To launch a discovery scan, browse to the
Inventory page and select
New Scan from the button in the upper right.
The Scope defines what IP ranges will be scanned. The scope defaults to the Site settings, but may be changed on a per scan basis as well. The scope should include at least one IP address or hostname. IP address ranges can be specified in most standard formats:
Hostnames specified in the scope will be resolved at runtime by the assigned agent. If the hostname returns multiple
IP addresses, all addresses in the response will be scanned. Hostnames can also have masks applied, indicting that
the mask should expand to each resolved address of the hostname. For example, if
example.com resolves to both
18.104.22.168, the input of
example.com/24 would become
The Advanced Options button can be used to display and modify additional scan settings, such as network exclusions, scan speed, the ports covered by the TCP scan, and which probes are enabled. The default settings should work for most organizations but may need to be tweaked for slow networks or unreliable links.