Basic Settings

You can use Basic settings to specify organizational and security-related aspects of a scan configuration. This includes specifying the name of the scan, its targets, whether the scan is scheduled, and who has access to the scan.

Tip: When you configure a Tenable-provided scan template, you can modify only the settings included for the template type. When you create a user-defined template, you can modify a custom set of settings for your scan.

The Basic settings include the following sections:

General

The general settings for a scan.

Setting Default Value Description

Name

None

Specifies the name of the scan or template.

Description

None

(Optional) Specifies a description of the scan or template.

Scan Results

Show in dashboard

Specifies whether the results of the scan should appear in dashboards or be kept private.

When set to Keep private, you must access the scan directly to view the results.

Folder

My Scans

Specifies the folder where the scan appears after being saved.

Agent Groups None

(Agent scans only) Specifies the agent group or groups you want the scan to target. Select an existing agent group from the drop-down box, or create a new agent group. For more information, see Create a New Agent Group.

Scan Window 1 hour (Agent scans only) (Required) Specifies the time frame during which agents must report in order to be included and visible in vulnerability reports. Use the drop-down box to select an interval of time, or click to type a custom scan window.

Scanner

Varies

Specifies the scanner that performs the scan.

The default scanner varies based on the organization and user.

Tags None Select one or more tags to scan all assets that have any of the specified tags applied. To see a list of assets identified by the specified tags, click View Assets. For more information, see Example: Tag-Based Scanning.

Target Groups

None

You can select or add a new target group to which the scan applies. Assets in the target group are used as scan targets.

Targets

None

Specifies one or more targets to be scanned. If you select a target group or upload a targets file, you are not required to specify additional targets.

Targets can be specified using a number of different formats.

Tip: You can force Tenable.io to use a given host name for a server during a scan by using the hostname[ip] syntax (e.g., www.example.com[192.168.1.1]).

Upload Targets

None

Uploads a text file that specifies targets.

The targets file must be formatted in the following manner:

  • ASCII file format
  • Only one target per line
  • No extra spaces at the end of a line
  • No extra lines following the last target

Note: Unicode/UTF-8 encoding is not supported.

Schedule

The scan schedule settings.

By default, scans are not scheduled. When you first access the Schedule section, the Enable Schedule setting appears, set to Off. To modify the settings listed on the following table, click the Off button. The rest of the settings appear.

Setting Default Value Description

Frequency

Once

Specifies how often the scan is launched.

  • Once: Schedule the scan at a specific time.
  • Daily: Schedule the scan to occur on a daily basis, at a specific time or to repeat up to every 20 days.
  • Weekly: Schedule the scan to occur on a recurring basis, by time and day of week, for up to 20 weeks.
  • Monthly: Schedule the scan to occur every month, by time and day or week of month, for up to 20 months.
  • Yearly: Schedule the scan to occur every year, by time and day, for up to 20 years.

Starts

Varies

Specifies the exact date and time when a scan launches.

The starting date defaults to the date when you are creating the scan. The starting time is the nearest half-hour interval. For example, if you create your scan on 09/31/2018 at 9:12 AM, the default starting date and time is set to 09/31/2018 and 09:30.

Timezone

Zulu

Specifies the timezone of the value set for Starts.

Repeat Every Varies Specifies the interval at which a scan is relaunched. The default value of this item varies based on the frequency you choose.
Repeat On Varies

Specifies what day of the week a scan repeats. This item appears only if you specify Weekly for Frequency.

The value for Repeat On defaults to the day of the week on which you create the scan.

Repeat By Day of the Month Specifies when a monthly scan is relaunched. This item appears only if you specify Monthly for Frequency.

Summary

N/A

Provides a summary of the schedule for your scan based on the values you have specified for the available settings.

Notifications

The notification settings for a scan.

Setting Default Value Description

Email Recipient(s)

None Specifies zero or more email addresses, separated by commas, that are alerted when a scan completes and the results are available.

Result Filters

None Defines the type of information to be emailed.

User Permissions

Share the scan or user-defined template with other users by setting permissions for users or groups. When you assign a permission to a group, that permission applies to all users within the group.

Permission Description
Scans  
No Access

(Default user only) Groups and users set to this permission cannot interact with the scan in any way.

Can View Groups and users with this permission can view the results of the scan, export the scan results, and move the scan to the Trash folder. They cannot view the scan configuration or permanently delete the scan.
Can Control

In addition to the tasks allowed by Can View, groups and users with this permission can launch, pause, and stop a scan. They cannot view the scan configuration or permanently delete the scan.

Can Configure

In addition to the tasks allowed by Can Control, groups and users with this permission can view the scan configuration and modify any setting for the scan except scan ownership. They can also delete the scan.

Note: Only the scan owner can change scan ownership.

Note: User roles override scan permissions in the following cases:

  • A basic user cannot run a scan or configure a scan, regardless of the permissions assigned to that user in the individual scan.

  • An administrator always has the equivalent of Can Configure permissions, regardless of the permissions set for the administrator account in the individual scan.

User-Defined Templates
No Access

(Default user only) Groups and users set to this permission cannot interact with the user-defined template in any way.

Can Use

Groups and users with this permission can view the template configuration and use the template to create scans.

Can Edit

In addition to viewing the template and using the template to create scans, groups and users with this permission can modify any template settings except user permissions and template ownership. However, they cannot export or delete the template.

Can Configure

In addition to viewing the template and using the template to create scans, groups and users with this permission can modify any setting for the template except template ownership. They can export the template, but cannot delete the template.

Note: Only the template owner can delete a template.