Scan Status

It's easy to find current status of your scans on the scans list. For a vulnerability scan, go to VM/VMDR > Scans. More

For a map, go to VM/VMDR > Scans > Maps.

For a compliance scan, go to PC > Scans > PC Scans.

For a SCAP scan, go to PC/SCAP > Scans > SCAP Scans.

For a web application scan, go to WAS > Scans.

When can I run reports on my scans?

The solid icon Scan Finished, Results Processed Icon

tells you all scan results have been processed, and these results are available in your account. You'll see the latest host based findings throughout the UI and you can create vulnerability scan reports including these findings.

Tell me about scan processing

Scan processing is triggered automatically by the Qualys Cloud Platform. You might like to know when scan processing is kicked off. This depends on your subscription settings, specifically whether the New Data Security Model (NDSM) is enabled (Users > Security).

- Is New Data Security Model enabled (NDSM)? Scan processing is kicked off as soon as a scan has finished. No login by any user is needed.

- Is NDSM turned off (not enabled)? Scan processing is kicked off as soon as any user in the subscription logs in.

Looking for more info?

You'll see icons that identify the scan status (Running, Finished, Canceling, etc.) combined with the processing status for all your scans. By looking at these icons you can easily tell which scan results are available within your account for reporting at any time.

Are scan results processed?

You'll see Scan Finished, Results Processed Icon (Finished) when a scan is finished and the results have been processed.

You'll see Scan Finished, Results Not Processed Icon (Finished, Not Processed) when a scan is finished and results processing is in progress.

Select a scan and check out the preview pane to see details on the scanning status and the results processing status. The Summary in the preview pane includes the number of hosts scanned and the number of appliances used. For a vulnerability scan you'll also see the number of vulnerabilities detected. Click the View Summary link to see the current status of the scan and details about scanner usage, including which scanners were used to scan target hosts in the Scanners section (note this is visible only when New Scanner Services is enabled).

Queued. A user launched the scan or the service started a scan based on a scan schedule. The scan job is waiting to be distributed to scanner(s).

Running. The scanner(s) are actively running the scan job.

Loading. The scanner(s) have finished the scan job, and the scan results are being loaded onto the platform. For a VM scan, some scan results may be available. This status appears only when New Scanner Services is turned on for your account. While a scan has the "Loading" status, it's not possible for any user to take these actions using the user interface or the API: cancel, delete, pause, share a PCI scan, or download complete scan results.

Finished. The scanner(s) have finished the scan job, the scan results were loaded onto the platform, and complete scan results are available for viewing. One of these states will apply: 1) vulnerabilities were detected (VM scan), 2) no vulnerabilities were detected (VM scan), or 3) target host(s) were down (not alive).

Canceling. A user canceled the scan, and the scanner(s) are in the process of stopping the scan job.

Canceled. A user canceled the scan, and the scanner(s) have stopped the scan job. For a VM scan, some scan results may be available.

Pausing. (VM or PC scan) A user paused the scan, and the scanner(s) are in the process of stopping the scan job (segment).

Paused. (VM or PC scan) A user paused the scan, and the scanner(s) stopped the scan job (segment). For a VM scan, some scan results may be available.

Resuming. (VM or PC scan) A user resumed the scan, and the scanner(s) are starting to run the scan job (a new scan segment).

Error. An error occurred during the scan, and the scan did not complete.