Nodeware's vulnerability scan policy was created to be lightweight enough to be run 24/7/365 but deep enough to discover critical vulnerabilities. Some sensitive assets may not react well to vulnerability scanning by Nodeware or any other vulnerability scanners. Symptoms include a loss of network availability, intermittent communication, and other undesirable errors.
This type of reaction tends to happen in non-enterprise or network sensitive assets, like VoIP phones. The first step to take is to pause the asset from vulnerability scanning.
Pausing/Resuming a Single Asset
To pause a single asset, do the following:
1. Click the customer card where the asset is located. The Network view is displayed.
2. Locate the asset to pause and click it.
3. At the top right of the screen, click the Pause icon.
The Pause icon will turn red, and an alert will appear indicating that the device was successfully paused.
In addition, a red Pause icon appears next to the asset in the Network view.
To resume scanning for an asset, select the asset and click the Pause icon. A message appears indicating scanning successfully resumed.
Pausing/Resuming Multiple Assets
To pause multiple assets, do the following:
1. Click the customer card where the assets are located. The Network view is displayed.
2. Locate the assets to pause and click the boxes next to each asset.
3. Click the Pause icon that appears in the header.
A message appears to confirm the rescan was successfully submitted.
4. On the Network view, hover over the assets. A message appears to indicate that the assets are in queue for a scan.
To resume scanning for multiple assets, select the assets and click the Pause icon. A message appears indicating scanning successfully resumed.
Resolve Issues
Pausing an asset should be considered a short-term solution as the poor reaction of a device to a vulnerability scan is itself a vulnerability. Consider this, for example, VoIP phones have virtually replaced all landline phones for businesses. If your phones or base stations are interrupted by Nodeware's lightweight scan policy, anyone wishing to disrupt your business's operations only need to run a vulnerability scan.
Most VoIP devices that experience issues often have firmware updates available from the vendor that adds basic flood protection that helps a device disregard or drop network connections to unused ports. For more information about VoIP phones and other devices, see the Device Issues article in the Troubleshooting section.
Comments
0 comments
Please sign in to leave a comment.