The Internal Scans tab displays the status and results of the Internal Vulnerability Scans application running on the SC//AcuVigil™ edge security device (ESD). The application scans the devices on the site network for known vulnerabilities, to support PCI DSS requirement 11.3.1 (v4.0.1). Use this tab to review scan status by month, see the vulnerabilities found, and configure the scans.
The tab shows the scan summary, vulnerabilities, settings, and authenticated scans for this site. For an overview of the application, see Internal Scans. To set up scanning, see Configuring the Internal Scans application.
Application description: "Performs vulnerability scans of devices connected to the Merchant Gateway" (legacy UI wording; the scans cover devices connected to the ESD).
Supported ESD models: MG3, SG1v1, SG2v1, XG1v1, VG
Layout
The Internal Scans tab has a standard app header and four sub-views: Scan Summary, Vulnerabilities, Settings, and Authenticated Scans. The default sub-view is Scan Summary.
Header
| Element | Description |
|---|---|
| App icon | Internal Scans app icon. Decorative. |
| Internal Vulnerability Scans | App name / block title. |
| Subtitle | "Performs vulnerability scans of devices connected to the Merchant Gateway". Static descriptor. This is legacy wording stored in the application package. |
| Version | Package version string. |
| Scan Summary | Link. Switches to the Scan Summary sub-view. |
| Vulnerabilities | Link. Switches to the Vulnerabilities sub-view. |
| Settings | Link. Switches to the Settings sub-view. |
| Authenticated Scans | Link. Switches to the Authenticated Scans sub-view. |
Scan summary sub-view
Shows the scans for a selected month.
Choosing a month
- Select the month and year.
- Select View Scans.
Scan status
A status bar shows whether a scan is running. For example:
No Scans in Progress
Scan table
The table lists each scan target for the selected month. A legend above the table shows the highlight colors for Unavailable for Scan and Remediation.
| Column | Description |
|---|---|
| Segment | The network segment of the scan target. |
| Scan Target | The device or address that was scanned (for example, 192.0.2.40). |
| Service Detection Phase | The date of the service detection phase, which finds the services running on the target. |
| Vulnerability Detection Phase | The date of the vulnerability detection phase. To download the results, select the download icon next to the date. |
| Reset Scan | Link. Resets the scan for this target. |
For more information about reading the results, see Viewing vulnerability scan results.
Vulnerabilities sub-view
Settings sub-view
Scale Computing manages the scan settings as part of the managed service; to request a change, contact Scale Computing Support. For what each setting does, see Configuring the Internal Scans application.
Authenticated scans sub-view
Holds the credentials the application uses for authenticated scans of this site's devices: SSH, SSH Private Key, Microsoft Windows Account, ESXi, SNMPv1/SNMPv2, and SNMPv3, plus the Retention Policy that sets how long Scale Computing keeps them. Users with the Admin or Support Manager role can add and change credentials. For details, see Managing your credentials for authenticated scans.