Managing Option Profiles

Map and scan configuration options are defined in option profiles. When launching and scheduling maps and vulnerability scans, you'll be required to apply a profile to the task. Customize an option profile to fine-tune the settings to your specific needs. For example, you can customize settings in an option profile to specify which probes are sent and which ports are scanned during host discovery, which hosts and ports are scanned during basic information gathering, and which TCP and UDP ports are scanned during port scanning.

Managers, Unit Managers and Scanners are allowed to create option profiles. Managers are allowed to edit any option profile, regardless of owner. Unit Managers are allowed to edit any option profile that they created for personal use and option profiles created by other users in their business unit. Scanners are only allowed to edit option profiles that they created for personal use.

Several profiles are provided by the service for your convenience. See Option Profiles Provided by the Service. The Library provides a variety of option profiles that you can import to your account. See About the Library.

A Payment Card Industry (PCI) option profile is provided by the service when the PCI compliance feature is enabled for your subscription. Managers can edit this option profile to change scan performance settings, enable the option to scan dead hosts, and add additional TCP ports to scan for host discovery. Note however that these settings should only be customized by users with an in-depth knowledge of the target network and available bandwidth resources. It's also best practice to make only small changes at a time and test your changes as you go.

 

To create an option profile:

1.    Select Option Profiles from the left menu, under Tools.

2.    Go to New > Option Profile.

3.    Specify settings in the following sections. Click Advanced to see all available options.

      Option Profile Title. Provide a title for the option profile. Managers and Unit Managers can also specify whether the profile should be globally available. Initially, the user who creates the profile is the owner of the profile. Managers and Unit Managers can edit the profile after it is saved to change the owner.

      Scan. Set scan options for network security audits.

      Map. Set map options for network discovery.

      Additional. Set additional options that affect how the service performs host discovery and how the service interacts with your firewall/IDS configuration.

4.    Click Save.

 

To edit an option profile:

1.    Select Option Profiles from the left menu, under Tools.

2.    Identify the option profile you want to edit, and click ico_edit.jpg.

3.    Make changes to the profile settings. (Click Restore Defaults to return to the initial settings. Note that this option is not available in the PCI option profile.)

4.    Click Save. Optionally, click Save As to save a copy of the profile with a new name. In this case, the original profile is not changed.

 

Related Reading

Importing Option Profiles from the Library

Managing Compliance Profiles