Freeze Windows

You can set a freeze window in Tenable.sc to specify a time frame when you do not want Tenable.sc to scan specific targets. This prevents remediation or ad-hoc scans from scanning assets during undesired time frames, such as during production hours. For more information about what happens to in-progress scans at the start of a freeze window, see the knowledge base article.

Freeze windows are organizational and affect all scans in the creating user’s organization. Only users with the Manage Freeze Windows permission can add, edit, or delete freeze windows.

For more information, see Add a Freeze Window, Edit a Freeze Window, and Delete a Freeze Window.

Option Description
Name A name for the freeze window.
Description (Optional) A description for the freeze window.
Enabled

When enabled, Tenable.sc does not scan any assets that are affected by the freeze window. If a scan does not include any assets outside of the freeze window, then the scan will abort.

When disabled, Tenable.sc scans all assets as scheduled.

Targets

Specifies the targets you do not want to scan during the freeze window.

  • All SystemsTenable.sc does not scan any assets.
  • AssetsTenable.sc does not scan specific Tenable-provided or user-defined asset lists.
  • IPsTenable.sc does not scan specific IP addresses.
  • MixedTenable.sc does not scan a combination of IP addresses and/or Tenable-provided or user-defined asset lists.

Note: If you select an Import Repository later in the configuration, Tenable.sc applies your Target selections only to scans configured with that import repository. Scans configured with other import repositories still run and scan targeted assets, regardless of your freeze window Targets selection.

Assets If you selected Assets or Mixed as the Targets, specifies one or more Tenable-provided or user-defined asset lists that you do not want to scan during the freeze window.
IPs If you selected IPs or Mixed as the Targets, specifies one or more asset IP addresses that you do not want to scan during the freeze window.
ImportRepository

(Optional) If you selected Assets, IPs, or Mixed as your Targets, specifies whether you want to restrict the freeze window to apply to scans configured with a specific import repository.

  • If you select a repository, Tenable.sc applies the freeze window to scans with the repository configured.

  • If you do not select a repository, Tenable.sc does not restrict the freeze by repository.

Starts On

Frequency

Repeat Every

Repeat On

Specifies a schedule for the freeze window.