Apply Exclusions
When the customer is Protection, they have the option to exclude discovered Networks and VPCs for External Scanning, choose Assets or AWS Tags to exclude for Internal Scanning, or enter CIDR to exclude for Network IDS.
For the External Scanning tab, a list of all discovered DNS Names and External IP Addresses' will appear in the left column. To exclude a discovered asset, the customer will have to move the asset from the left column (Assets Available to Exclude) into the right column (Excluded From External Scanning).
In this screen an asset has been excluded. If the customer decides they no longer want to exclude an asset, they can click on "Cancel" to move the asset back into the left column.
For the Internal Scanning tab, the customer needs to search for an Asset or an AWS Tag to exclude. This is the default screen for the "ASSETS" toggle.
Here, the customer has started a search for 'VPC' within the Assets toggle. All assets with that search term are displayed in the left column and the customer can then choose whether or not they would like to exclude them
Here is an example of an excluded VPC.
In the "TAGS" toggle, the customer has already added a VPC after executing a search.
Here, the customer has started a search for 'Apache' within the Tags toggle. All assets with that search term are displayed in the left column and the customer can then choose whether or not they would like to exclude them.
The only result for 'Apache' has been added to the Exclusions column. Since there are no more matches, the zero state appears letting them know they have no more matches for their search query.
For the Network IDS tab, the customer will need to enter a CIDR with the protocol and port. Until they successfully add the correct information, the "Exclude and Add Another" button will be disabled.
All fields have been successfully entered so the "Exclude and Add Another" button is now active in its primary state.
The customer has successfully added a CIDR into their exclusions column. Because they need to add a specific CIDR to exclusions, they are not able to shuffle the CIDR into the left column (per the previous tab screens). To remove the CIDR from the exclusion list, the customer will have to click "(X) REMOVE".
View of topology diagram with Rules applied.
Scheduling
By default, everything in the deployment will be scanned. Scheduling gives the customer the ability to control when scans occur. The customer can set times for Discovery Scans, Vulnerability Scans and PCI Scans. On the far right of the scan tabs is the customer's time zone in a dropdown. Here, the time zone can be changed, which will change all of the scheduled scans in this deployment to the new time zone.
This screen shows the Discovery Scan scheduling. The only option the customer will have is "Only scan during certain hours of the day".
When "Only scan during certain hours of the day" has been selected, more options will appear. The customer must select a 12-hour or 8-hour window and specify the start time.
If the customer has started entering information in any tab, they must "SAVE" or "CANCEL" before moving to another tab.
This screen shows the alert that appears when the customer tries to switch tabs without saving.
When each tabbed section has been saved and/or edited, the green "SAVED" button will display as a visual indicator for the customer. If they return to a tab and make edits, the button will return to the primary color until saved again.
This is the default screen for Vulnerability Scans. Here the customer has 3 options which will be elaborated on in the following screens.
Just like in Discovery Scans, the customer has the option to "Only scan during certain hours of the day". The customer has selected a 12-hour window.
They have also chosen to scan on certain days of the week and to blackout during popular holidays.
For "Only scan on certain days of every week" the customer has chosen to **not** scan on Monday. Scans will be performed on Sun, Tues, Wed, Thurs, Fri and Sat.
For "Blackout certain Public Holidays" the customer has selected the option to **not** scan on Black Friday.
This is the default screen for PCI Scans. The only option for this scan is "Only scan on these days of the month".
When selected, the default behavior is to have every day of the month selected.
Here the customer will have to select what days of the month they **don't** want to scan.
