Setting Up Network Scan

Network Scan settings on the network sensor are used by default to detect additional services other than the services you detect, or to classify node types by determining which equipment uses a specific protocols.

  1. Go to System in the top panel
  2. Go to System > Sensor in the left panel
  3. Select the checkbox for the network sensor whose network scanning settings you want to change.
  4. Click Tasks > Edit Network Sensor Settings
  5. In the Network Scan topic, select the options you want to change and change the settings.
  6. Click Save

DHCP Server Scan

Detects a DHCP server operating in the administrative band of a network sensor.

It is used to detect DHCP services and to detect targets that provide unusual DHCP services in risk detection.

UPNP Scan

Gather information over HTTP through the Universal Plug and Play (UPNP) protocol. Used for platform classification to respond with requests for periodic UPNP.

HP SLP Scan

The Hewlett Packard (HP) printer provides Service Location Protocol (SLP) to collect information as multicast using UDP 427 ports and classify node types as printers.

SIP Scan

The Session Initiation Protocol (SIP) collects session status information for multimedia using UDP 5060 ports and classifies node types by VOIP.