Option Profile Title Tab Scan Tab Additional Tab  

PCI Option Profile: Scan 

The Scan tab is where you'll make scan settings like title, owner and whether the option profile should be global.

Jump to a section below: 

Performance

Scan Dead Hosts

Close Vulnerabilities on Dead Hosts

Purge old host data when OS is changed


Performance

A performance level of Custom is selected initially in the profile "Payment Card Industry (PCI) Options" with settings optimized for PCI external scans. This is recommended for most cases.

Click Configure to change the individual settings or to select a different performance level.

Want to know more about the individual settings? See performance settings for PCI scans.  


Scan Dead Hosts

To determine if a host is alive or dead, we check usual services on the host, such as SMTP, SSH and HTTP, and try to ping it. If none of the services respond, the host is declared dead and no further processing is done. You can choose to scan these hosts but note that this may substantially increase the scan time.


Close Vulnerabilities on Dead Hosts 

Quickly close vulnerabilities for hosts that are not found alive after a set number of scans. When enabled, we'll mark existing tickets associated with dead hosts as Closed/Fixed and update the vulnerability status to Fixed.

Note: This feature must be enabled for your subscription. Contact your Account Manager or Support to get it.


Purge old host data when OS is changed 

Note: This feature must be enabled for your subscription. Contact your Account Manager or Support to get it.

This option is useful if you have systems that are regularly decommissioned or replaced. When enabled, we'll purge a host if we detect a change in the host's operating system vendor, for example the OS changes from Linux to Windows or Debian to Ubuntu. We will not purge the host for an OS version change like Linux 2.8.13 to Linux 2.9.4.