topic Re: Trying to launch manual NMAP scan on Firesight 6.2 in Network Security

Trying to launch manual NMAP scan on Firesight 6.2

Colin Higgins — Fri, 21 Feb 2020 14:51:04 GMT

I have a Firesight 1500 system running 6.2.2

I am trying to launch a manual NMAP scan of a host by going to

system--tools--scheduling

and selecting NMAP scan

the problem is, when I select a scan, the time, etc. I don't have the option of specifying a Nmap target. If I try to pull that menu down, there is nothing in it, nor do I have the ability to add an IP address, etc.

I assumed that the menu was pulling from pre-defined objects within the system that I created (hosts, networks, etc.). Is that incorrect?

Anyone have an idea of what I am doing wrong here?

Re: Trying to launch manual NMAP scan on Firesight 6.2

mikael.lahtela — Wed, 29 Nov 2017 19:36:51 GMT

Hi,

Did you add the nmap scanner under Policies>Actions>Scanners?

br, Micke

Re: Trying to launch manual NMAP scan on Firesight 6.2

Colin Higgins — Wed, 29 Nov 2017 20:19:09 GMT

I did, but I didn't add a blacklist of any kind (to prevent it from scanning certain networks)

does this mean that if I launch a manual scan, it will scan the whole network? (or all discovered hosts). It would be nice to be able to indicate exactly which host I want to scan.

Re: Trying to launch manual NMAP scan on Firesight 6.2

mikael.lahtela — Wed, 29 Nov 2017 20:28:24 GMT

If you want to do a manual scan on a specific host you can do it under host profile.
You can also use correlation policy to activate scan in specific scenario.

Or you can create a custom target under Policies>Actions>Scanners "target" up in the right corner.

br, Micke