Scan Window policy
Use the Scan Window policy on the SiteProtector Console to define hours of allowed scanning for discovery scans (scan windows), assessment scans (scan windows), and the time zone in which you want the scanning to occur, which is typically the time zone of the assets.
By default, scanning is allowed at any time. If you want to limit scanning, be sure to define scan windows.
Scope
The Scan Window policy applies to background discovery and assessment scans. For an ad hoc scan, you can choose whether to run the scan only during the windows defined in this policy or to run the scan without restriction.
By default, all scan windows are open, so that scanning is allowed at any time. When you open a Scan Window policy, however, the default changes; and all scan windows are closed. If you modify a Scan Window policy, be sure to define scan windows for discovery and for assessment scans.
Important: If you start a scan when there are no scan windows, the job appears in the Command Jobs window in the idle state; but it will not run until you define scan windows.
Important consideration for multiple agents
If you have multiple agents, you should stagger your scan windows so that the discovery scan can finish before the assessment scan begins. If a discovery scan adds assets to a group while an assessment scan is running, there is no guarantee that those assets will be included in the assessment scan.
