Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to use Discovery scan as an asset update source for a Network Scan (System Scan) in Elements Exposure Management?

Issue:

How to use Elements Exposure Management Discovery scan as an asset update source for a Network Scan (System Scan)? How to have assets (devices, computers, servers, IoT) automatically added to a Scan Group when they are discovered in a Discovery scan? 

Resolution:

Steps to adding a Discovery Scan:

  1. Log in to the Elements Security Center portal
  2. Navigate to the Security Configurations > Scans > Discovery Scans page 
  3. Click Add Discovery scan 
  4. Select Port Scan and add the IP range and give the scan a unique name
  5. Select Scan node that has been installed to that environment (or use Cloud scan node)
  6. Click Next
  7. Select the Discovery scan template 
  8. Click Next
  9. Add any notification recipients and then finish adding the discovery scan

After scan has been added to the Discovery Scans page, click the start button on the Discovery scans page on the right side of that Discovery scan. The scan will be queued and initialized. 

After Discovery Scan has been completed, you can see the results by clicking the name of the Discovery Scan. 

To use that Discovery Scan as the automatic asset update source for a network scan:

  1. Go to the Security configurations > Scans > Network Scans page
  2. Click Add scan group
  3. Add name to the Network scan 
  4. Click Next 
  5. Select scan node that should be used 
  6. Enable "Asset update sources" -> click Add source -> in source instance select the recently created Discovery Scan (trigger can be "once a discovery scan is completed" 
  7. Click Next
  8. Do the same for Web Scans as you did for System Scans (or you can disable Web Scan altogether)
  9. Click Next 
  10. Finish creating the scan 

To run the created Network Scan, click on the box on the left side of the network scan name (a menu will appear) and click Start Scanning