• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 192
  • Last Modified:

Are VA scans normally done on servers zones/subnets only or includes users & Management zone?

What's the best practice out there?  Only scan server zones ie
DMZ, App server (internal) zone & DB zone?

What about servers' Management zone & PCs/users zones?

Can I say the reasons PCs /users subnets are not being scanned
because these are of low critical devices and to scan them will
take days (we have 2800 PCs) ?
2 Solutions
Scan EVERYTHING! The weakest link in the chain motto fits in well here.
sunhuxAuthor Commented:
in our headquarter, there are 30000 PCs  (& 1200 servers) : I can't imagine scanning
30000 PCs/laptops considering nowadays the PCs have the sizing with similar number
of files/services as servers
Your question is a little vague.

for scanning 30000 hosts probably best is to select random sub-sample for first scan, eliminate defects found on all 30000 hosts, extend sample, rinse, repeat and so on until comfortable.

We have scanner hooked to AD logs, so that long-absent laptops are attacked with all remedy tools possible, and we scan 100 random out of 5000 hosts with patch scanner and all powered on-hosts with network-only scanner during weekends after "Patch Tuesday". That way we scan all servers and all workstations that pretend to be servers.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now