Scan Window policy
Use the Scan Window policy on the SiteProtector Console to define hours of
allowed scanning for discovery scans (scan windows), assessment scans (scan
windows), and the time zone in which you want the scanning to occur, which is
typically the time zone of the assets.
By default, scanning is allowed at any time. If you want to limit scanning, be sure
to define scan windows.
Scope
The Scan Window policy applies to background discovery and assessment scans.
For an ad hoc scan, you can choose whether to run the scan only during the
windows defined in this policy or to run the scan without restriction.
By default, all scan windows are open, so that scanning is allowed at any time.
When you open a Scan Window policy,however, the default changes; and all scan
windows are closed. If you modify a Scan Window policy,be sure to define scan
windows for discovery and for assessment scans.
Important: If you start a scan when there are no scan windows, the job appears in
the Command Jobs window in the idle state; but it will not run until you define
scan windows.
Important consideration for multiple agents
If you have multiple agents, you should stagger your scan windows so that the
discovery scan can finish before the assessment scan begins. If a discovery scan
adds assets to a group while an assessment scan is running, there is no guarantee
that those assets will be included in the assessment scan.
Chapter3. Enterprise Scanner policies 59