Scans Setup

Go to PC > Scans > Setup to see global setup options related to scanning.

Some options may not be available, depending on your service level and subscription settings.

Inactive Instance Purge

This option enables you to automatically remove technology/instances that have not been detected within the specified time frame. A Manager can enable this option and set a time frame in order to automatically purge instances.

This is helpful when using Scan By Policy (SBP) or when scanning assets using agent and scanner (with agent merging enabled with unified view/smart merging), as instance data for previously discovered instances is retained even if they may no longer be reported in the latest scan.

Storage

View the storage settings for scan results, as defined for your account, and change if you want. 

If you modify (increase or decrease) the retention period in the Storage Setup window, and as a result the retention period shown in the Scans tab for any scan(s) becomes zero (0), a warning message is displayed. A retention period of zero (0) means the corresponding scan data will be deleted overnight.

For example, if you decrease the retention period from 6 months to 3 months, and because of this the Scan Retention Period (Days) for any scan(s) becomes zero (0), the warning message is displayed. This message notifies you that some scans are older than the newly set retention period and will be deleted if you proceed. This gives you a chance to review and make an informed decision before applying the change.

Excluded Hosts

Hosts added to the excluded hosts list will never be scanned by the service, even if included in the scan target by a user.

Dissolvable Agent

You must accept the Dissolvable Agent (Agent) in order to perform certain types of security scans. Once accepted, the Agent is installed as needed on your Windows devices to collect host data. The Agent removes itself completely when the scan is complete. Learn more

PCI Account Links

To share PCI scans with your PCI Merchant accounts, you must create links to those accounts. Go to the PCI Account Links Setup page to manage your PCI account links.

Scheduled Scans

The Manager primary contact has the option to prevent the service from starting a new scheduled scan when there's an instance of it running. Also the Manager primary contact has the option to allow users to configure a scheduled scan to relaunch once a scan instance finishes. This supports continuous scanning.

Scan Retention Period

This setup is visible only to the Point Of Contact (POC) user. On selecting the Display Scan Retention Period column in the Scans and Maps tab checkbox, the  Scan Retention Period (Days) column is displayed in the Scans tab.

Scanner Trusted CA

The Manager primary contact has the option to accept this feature allowing Managers to create a list of private certificate authorities for use by the scanner. Learn more

DNS Tracking

The Manager primary contact has the option to automatically change the tracking method from IP to DNS for hosts when a valid DNS hostname is detected at scan time. This applies only when scans are launched by DNS hostname. Learn more

Syslog Forwarding

A Manager user has the option to enable this feature to have scan related syslog messages (/var/log/messages syslog stream) forwarded from scanner appliances to a remote syslog server. Once enabled, syslog forwarding is on for all scanner appliances (virtual and physical) currently in the subscription and for new scanners that get added later. Learn more