Excluding Hosts

Hosts may be excluded on a per scan basis or on a global basis.

To exclude hosts per scan:

Any user with scanning privileges can exclude hosts on a per scan basis. When launching or scheduling your scan, enter the scan target in the Target Hosts section, and then enter the IP addresses/ranges you want to exclude from the scan in the Exclude IPs/Ranges field. Multiple entries are comma separated. No scanning traffic will be sent to the excluded hosts for the scan. This feature is supported for all IP-based scans including vulnerability scans, compliance scans and FDCC scans.

To globally exclude hosts:

There is one global excluded hosts list for the subscription. The IPs in this list will never be mapped or scanned by the service, even if specified as part of a map or scan target. No scanning traffic, including ICMP, TCP and UDP probes, will be sent to excluded hosts. (Note that excluded hosts may still appear in map results if discovered via a DNS method. If the IP belonging to a DNS server is included in the excluded hosts list and this server is used to resolve DNS names for hosts in the map target, then the service will still send normal requests to the DNS server. The server, however, will not be scanned for vulnerabilities.)

Both Managers and Unit Managers have privileges to edit the excluded hosts list. Managers can add/remove any host in the subscription. Unit Managers can add/remove any host in their business unit. IPs not currently in the subscription may also be added to the excluded hosts list, ensuring that they will not be scanned even if later added to the subscription.

To globally excluded hosts, go to Setup > Excluded hosts. The Excluded Hosts Setup page appears with a list of IPs currently in the excluded hosts list. For Managers, this list includes all excluded hosts in the subscription. For Unit Managers, this list includes all excluded hosts in your business unit. Click Edit to make changes to the list. You can add or remove hosts. Note that add and remove actions must be performed at different times. See Edit Excluded Hosts for more information.