The External Scans application, shown in the SC//AcuVigil™ dashboard as PCI External Scans, runs external vulnerability scans of your site's internet-facing systems. You can use it to comply with the Payment Card Industry Data Security Standard (PCI DSS) requirement for quarterly external vulnerability scans of critical systems: requirement 11.3.2 in PCI DSS v4.0. That requirement calls for the scans to be performed by an Approved Scanning Vendor (ASV).
The scans are performed by Clone Systems, a PCI Approved Scanning Vendor.
For scans of devices inside your network (PCI DSS requirement 11.3.1), use the Internal Scans application.
Where to find it
To see this application's reports and company-wide settings for all your sites, select External Scans from the Apps menu. The page is titled PCI External Scans.
Features
- Scans the site's internet-facing systems from outside your network.
- Supports quarterly external vulnerability scanning for PCI DSS requirement 11.3.2.
- Shows the result and status of the latest scan for each scan cycle in the site's External Scans tab.
- Lists the result of each scan check, with its severity.
Installing the External Scans application
Scale Computing sets up External Scans for you as part of the managed service. To add External Scans to your sites, contact Scale Computing Support. Open a ticket in the SC//AcuVigil dashboard, email team@scalecomputing.com, or call (512) 687-7401.
Viewing scan results
To see a site's latest scan, open the site's Status page and choose the External Scans tab. From the Scan Cycle dropdown, choose the month you want to view. The tab shows the overall result, the scan status and times, and each check the scan ran. For each field, see External Scans tab.
System requirements
- Scale Computing ESD: MG3, SG1v1, SG2v1, XG1v1, or VG
Getting help
If you have questions about your external scan results, open a ticket in the SC//AcuVigil dashboard, email team@scalecomputing.com, or call (512) 687-7401.