Blackout Windows

You can set a blackout window in Tenable.sc to specify a timeframe when you do not want Tenable.sc to scan specific targets. This prevents remediation or ad hoc scans from running during undesired timeframes, such as during production hours. For more information about what happens to in-progress scans at the start of a blackout window, see the knowledge base article.

Blackout windows are organizational and affect all scans in the creating user’s organization. Only users with the Manage Blackout Windows permission can add, edit, or delete blackout windows.

For more information, see Add a Blackout Window, Edit a Blackout Window, and Delete a Blackout Window.

Blackout Window Options

Option Description
Name A name for the blackout window.
Description (Optional) A description for the blackout window.
Enabled

When enabled, Tenable.sc does not run scans during the blackout window.

When disabled, scans run as scheduled.

Targets

Specifies the targets you do not want to scan during the blackout window.

  • All SystemsTenable.sc does not run any scans.
  • AssetsTenable.sc does not run any scans on specific Tenable-provided asset types.
  • IPsTenable.sc does not run any scans on specific IP addresses.
  • MixedTenable.sc does not run any scans on a combination of Tenable-provided asset types or IP addresses.

Note: If you select an Import Repository later in the configuration, Tenable.sc applies your Target selections only to scans configured with that import repository. Scans configured with other import repositories still run and scan targeted assets, regardless of your blackout window Targets selection.

Assets If you selected Assets or Mixed as the Targets, specifies one or more Tenable-provided asset types that you do not want to scan during the blackout window.
IPs If you selected IPs or Mixed as the Targets, specifies one or more asset IP addresses that you do not want to scan during the blackout window.
ImportRepository

(Optional) If you selected Assets, IPs, or Mixed as your Targets, specifies whether you want to restrict the blackout window to apply to scans configured with a specific import repository.

  • If you select a repository, Tenable.sc applies the blackout window to scans with the repository configured.

  • If you do not select a repository, Tenable.sc does not restrict the blackout by repository.

Starts On

Frequency

Repeat Every

Repeat On

Specifies a schedule for the blackout window.