Custom scan configuration

Hi, I am trying to scan a subnet with system discovery but I want to customize it and be able to detect information about the OS of the host and nothing else. Is there any way of doing that?

Thanks in advance!

You can clone the ‚ÄúSystem Discovery‚ÄĚ scan config (using the ‚ÄúSheep‚ÄĚ clone icon at the far right of the ‚ÄúSystem Discovery‚ÄĚ item in the Scan config page.

Once you clone it you can limit the scans that are included by editing the cloned config and looking at the column that shows how many tests are enabled from each ‚ÄúFamily‚ÄĚ. For those with tests enabled, you can use edit the Family and remove unwanted tests.

3 Likes

yes this is worked, thank you very much!

1 Like

One additional possibility could be also to clone the existing Base config and just add the following VT to it:

  • Name: OS Detection Consolidation and Reporting
  • OID: 1.3.6.1.4.1.25623.1.0.105937
  • Family: Product detection

This should pull in all VTs doing some kind of OS detection (if the auto_enable_dependencies scanner preference is kept on yes) while keeping other logging / reporting at the minimum required.

2 Likes

Yes, this is in fact a faster path to the desired configuration. :+1:

1 Like