A scan status report is displayed each time you launch a vulnerability scan. This report is updated every 60 seconds until all targeted hosts have been analyzed. You can safely close this window and let the scan run in the background, and then return to get the latest information about your scan.
Partial results will be available for download when at least one host has been scanned and your scan is still in progress.
Review the segment detail to find out what part of the scan the scanner(s) are working on and/or have already finished. Each scan will have one or more scan segments. For each segment you'll see the duration of time when the scanner(s) were scanning the segment. When a segment is running you'll see the hosts actively being scanned by the scanner(s). (Note that this section is only visible when New Scanner Services is enabled for the subscription.)
What is a scan segment?What is a scan segment?
A scan segment identifies a portion of scanning work that the service has distributed to scanner(s). A scan will have one segment unless it is paused. If a scan is paused and resumed one time, the scan will have two segments. If it is paused and resumed five times it will have six segments.
Tell me about scan durationTell me about scan duration
Only the time when the scanner(s) are performing a scan job is counted in the scan duration.
Launch a scan. When a scan is launched, the first segment is created. The scan status has these transitions if no other user actions are taken: Queued > Running > Loading > Finished. The time the scan is in the "Running" state is counted in the scan duration.
Cancel a scan. When a scan is canceled, the current segment is ended. The scan status has these transitions: Running > Canceling > Loading > Canceled. The time the scan is in the "Running" and "Canceling" states is counted in the scan duration.
Pause a scan. When a scan is paused, the current segment is ended and the partial results data for this segment are loaded on the platform independently. The scan status for each segment has these transitions: Running > Pausing > Loading > Paused. The time the scan is in the "Running" and "Pausing" states is counted in the scan duration.
Resume a scan. When a scan is resumed, a new segment is created. The scan status has these transitions: Paused > Resuming > Running. The time the scan is in the "Resuming" and "Running" states is counted in the scan duration.
In the Scanners section you can expand details for any scan segment to see which scanners were used to scan hosts. When an external scanner is used, the scanner's IP address is shown. When a scanner appliance is used, the scanner's friendly name is shown. (Note that this section is only visible when New Scanner Services is enabled for the subscription.)
Tell me about scan job detailTell me about scan job detail
The scan job detail is shown for each scanner that performs work for a scan segment. When a single scanner is used, you'll see one slice. When there are multiple scanners used, you'll see multiple slices, one for each scanner doing work. Expand details to see the hosts scanned.
What does the Total Hosts count indicate?What does the Total Hosts count indicate?
This is the total number of hosts in the target list for the scan job detail (segment/slice).
What does the Host Alive count indicate?What does the Host Alive count indicate?
While working on a scan segment, scanner(s) first discover whether hosts in the scan target are alive before proceeding to scan them. This is a continuous process as host discovery and scanning occur throughout the scanning process. The Hosts Alive column shows the total number of hosts discovered as alive for the scan job detail (segment/slice). For a paused or canceled scan the number of hosts alive can be greater than the number of hosts actually scanned. This is because a host may have been found alive during host discovery but the scan was stopped before the host could be analyzed. Expand the details to see which hosts were scanned and not scanned. You can see the total number of hosts scanned in the General Information section.
Failed Slice Host shows all the failed targets (IPv4, IPv6, DNS, and NETBIOS) in your vulnerability scan.
The Hosts Exceeded Duration section in Scan Status will show a list of hosts (organized by target type) that exceeded the maximum scan duration specified in the option profile. When this option is used, if a scan takes longer than the allowed time on a single host, then the scan of that host is aborted and the scanner will move to the next target in the scan job. This tab will be blank if no hosts in the scan target exceeded scan duration or if this option is not enabled in the option profile. Note that you will not have scan results for hosts that exceeded the scan duration.