Tell me about Map Results

Each completed map has a map results report listing the devices discovered on the map target.


How do I view map results?

Go to VM/VMDR > Scans > Maps, identify the finished map you are interested in, and then under Quick Actions, select View Report.

How can I see a graphical view of my map?

Go to View > Graphic Mode to change the format of your map results to graphic mode. Learn more

How do I download my map results?

Go to File > Download to download your report. The following file formats are available: PDF, XML, and CSV.

How do I print my map results?

Go to File > Print to print your report. Your printed report appears as it does online, meaning that expanded sections appear expanded and collapsed sections appear collapsed.

If your printed report is too wide to fit into the page, try the following: shorten the left and right page margins in your browser settings, print the report in Landscape orientation or download the report in PDF format.

Tell me about the Report Summary

In this section, you see the settings specified for the map task. For example, you see the domain and netblock included in the map target. If the map is generated for IPs/ranges, then none appears with the IPs enclosed in square brackets. You can also see the used option profile and the total number of detected hosts.

Tell me about the Results list

In this section, you can see a list of the hosts detected on the mapped domain. For each host, you can see the IP address, DNS and NetBIOS hostnames, the router being used by the host, and the operating system.

Tell me about the columns: A, S, L, and N Tell me about the columns: A, S, L, and N

  • Approved (A): Identifies whether the host is approved for the domain. An A appears in this column if the host is in the approved hosts list. This column is blank if the host is not in the approved hosts list. You can configure approved hosts for your domains from the domain assets list. Learn more
  • Scannable (S): Identifies whether the host is in your account and therefore scannable. An S appears in this column if the host is in your account. This column is blank if the host is not in your account.
  • Live (L): Identifies whether the host was alive at the time of the discovery. L appears in this column if the host was alive at the time of discovery. This column is blank if the host was not alive at the time of discovery.
  • Netblock (N): Identifies whether the host is included in the netblock for the domain. N appears in this column if the host is in the domain's netblock. This column is blank if the host is not in the domain's netblock.

How do I see a list of open services for a hostHow do I see a list of open services for a host

Click the black arrow next to any host to view a list of open services on the host. For each service detected, the discovery method used to identify the service is listed along with the port the service was running on (if available).

Tell me more about discovery methodsTell me more about discovery methodsThe following are the discovery methods:
  • ICMP: The mapping service received an ICMP packet from the host.
  • TCP Port: The mapping service detected open TCP port <number>.
  • UDP Port: The mapping service detected open UDP port <number>.
  • DNS: The mapping service resolved a name within the domain into this host's IP address.
  • Reverse DNS: The mapping service resolved the host's IP address into a name within the domain.
  • DNS Zone Transfer: Detected via Zone Transfer.
  • TCP RST: The mapping service received TCP Reset packets from this host.
  • Traceroute: The mapping service discovered this host via traceroute.
  • Other Protocol or ICMP: The mapping service received an IP packet from this host whose protocol is not TCP, UDP, or ICMP.
  • Other TCP Ports: The mapping service received TCP packets whose source ports are not in the list of probed ports. 

How do I take actions on the hosts in my map results?

Map results are closely integrated with scan capabilities. There are several actions you can perform on the hosts listed in your map results. For example, you can scan hosts right away, you can add newly discovered hosts to your account, and you can add hosts to the approved hosts list for the mapped domain that allows you to identify rogue devices by creating the Unknown Device Report. Select the check box next to each host to include in the action, select an action from the Actions drop-down menu (at the top of the report), and then click Apply.

How long are map results saved?

By default, map results are saved on your maps list for 6 months, at which time they are automatically deleted. To change this setting, you can go to Scans > Setup > Storage.