Running An Ad Hoc Discovery Scan - IBM Proventia Network Enterprise Scanner User Manual

Running an Ad Hoc Discovery Scan

Introduction
Procedure
IBM Proventia Network Enterprise Scanner User Guide, Version 1.3
When you run an ad hoc discovery scan, you define scanning control parameters,
including which IP addresses to scan.
To run an ad hoc discovery scan:
1. On the SiteProtector navigation pane, expand the Site and the groups in the site until
you locate the group on which to run a discovery scan.
Newly discovered assets are added to this group.
Note:
2. Right-click the group, and then select Scan from the pop-up menu.
You can start a scan from a tab with any view except for a Policy view.
Note:
3. Select Network Enterprise Scanner/Ad-Hoc Scan, and then click OK.
4. Select Adhoc Scan Control on the navigation pane.
5. In the Ad Hoc Discovery section, select the Perform one-time discovery scan of this
group check box.
6. Type a Job name to identify the job when it appears in the Command Jobs window.
7. If you want the scan to run only during your scheduled scanning windows, select the
Run only during open discovery windows.
8. Select a perspective in the Perform one-time scan from this perspective (Network
location) list if you want to scan the group from a perspective other than the default.
You must have assigned an agent to the perspective in the ESM policy.
Important:
9. On the navigation pane, select Discovery, and then complete the following fields to
define the discovery scan:
Field
IP range(s) to scan
Ping hosts in this range, before
scanning, to exclude
unreachable hosts
Add newly discovered assets to
group
Add previously known assets to
group
A red box appears around the IP range(s) to scan box until the data is
Note:
validated.
10. Click OK.
The ad hoc discovery scan appears in the Command Jobs window.
Running an Ad Hoc Discovery Scan
Description
The IP addresses to discover (in dotted-decimal or CIDR
notation), formatted as follows:
• one or more single IP addresses
• one or more IP address ranges
Note: Separate by commas or by new lines.
Sends an ICMP ping to each host in the range, and then
scans only the hosts that respond to the ping.
Adds discovered assets that are unknown to SiteProtector
to this group.
Adds assets that are already known to SiteProtector to this
group.
195