Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Are VA scans normally done on servers zones/subnets only or includes users & Management zone?

Posted on 2016-10-09
4
111 Views
Last Modified: 2016-10-24
What's the best practice out there?  Only scan server zones ie
DMZ, App server (internal) zone & DB zone?

What about servers' Management zone & PCs/users zones?

Can I say the reasons PCs /users subnets are not being scanned
because these are of low critical devices and to scan them will
take days (we have 2800 PCs) ?
0
Comment
Question by:sunhux
4 Comments
 
LVL 17

Assisted Solution

by:OriNetworks
OriNetworks earned 150 total points
ID: 41835926
Scan EVERYTHING! The weakest link in the chain motto fits in well here.
0
 

Author Comment

by:sunhux
ID: 41837022
in our headquarter, there are 30000 PCs  (& 1200 servers) : I can't imagine scanning
30000 PCs/laptops considering nowadays the PCs have the sizing with similar number
of files/services as servers
0
 
LVL 62

Accepted Solution

by:
gheist earned 350 total points
ID: 41845803
Your question is a little vague.

for scanning 30000 hosts probably best is to select random sub-sample for first scan, eliminate defects found on all 30000 hosts, extend sample, rinse, repeat and so on until comfortable.

We have scanner hooked to AD logs, so that long-absent laptops are attacked with all remedy tools possible, and we scan 100 random out of 5000 hosts with patch scanner and all powered on-hosts with network-only scanner during weekends after "Patch Tuesday". That way we scan all servers and all workstations that pretend to be servers.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this increasingly digital world, security hacks are no longer just a threat, but a reality. As we've witnessed with Target's big identity hack 2013, Heartbleed in 2015, and now Cloudbleed, companies and their leaders need to prepare for the unthi…
If you are looking at this article, you have most likely been hit by some version of ransomware and are trying to find out if there is anything you can do, or what way you should react - READ ON!
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question