Network Scan Profile
The Network Scan profile provides a focused security assessment of your network infrastructure. It aims to discover active devices, identify running services, and uncover associated vulnerabilities and misconfigurations within a defined network scope.
Overview and Capabilities
- Network Discovery and Mapping:
- Identifies active devices (hosts) within the target scope.
- Scans discovered devices for open ports to determine accessible network services.
- Service and Technology Identification:
- Identifies the specific services and applications running on open ports (e.g., web servers, databases, mail servers).
- Detects the underlying technologies used by discovered services and devices.
- Vulnerability Scanning:
- Scans identified network services and devices for thousands of known vulnerabilities (CVEs).
- Checks for common security misconfigurations across the network infrastructure.
- Identifies potential vulnerabilities in discoverable software components and dependencies.
- Security Configuration Analysis:
- Analyzes SSL/TLS encryption configurations on detected services for weaknesses, certificate issues, and outdated protocols.
- DNS and Domain Security Checks:
- Performs domain name system (DNS) security checks relevant to the network scope.
- Checks associated subdomains for potential takeover risks.
- IP Address Information:
- Retrieves ownership and registration details (WHOIS) for IP addresses within the scope.
- Determines the geographical location (Geolocation) of IP addresses.