Our organization has 21 sites, each with it’s own include and exclude list of IP ranges for scans. Is there a way to export these included/excluded IP ranges preferably as a .csv? I noticed in InsightVM under each site there’s an option to export the asset list as a .csv, but I really just want the Site Configuration settings for each site, and the IP ranges that have been configured. They were originally entered manually, not imported from a file, but we’re working on a process to better automate maintaining the list of IPs ranges we’re including and excluding in our scans.
Also, from what I’ve been told, you really should reduce that to just a few sites for performance reson.
I break my sites up by the credentials they use to avoid unnecessary authentication attempts, then each site has a scan for each scan engine pool to account for different engines for different access needs.
Hmm, I wasn’t aware of a site limit, but I’m fairly new to this and our organization config was setup before my time. I suppose we could look into changing it but that would be a pretty large undertaking at this point.
Thanks for the API suggestion I’ll look into it.
It took me about a year to redesign our system recently after this was discovered during a health check.
Each site takes up quite a bit of RAM, so they should be limited.
Asset Groups should be used where to need to assign things to or filter Site/Scan Schedule membership.
Tag filters are the best way to populate enrichment data, then filtering on these Tags, just like you are doing with Tagging your location then having a Asset Group look for those Tags. I originally had a Static Asset Group to do the Tagging and I was told this is doubling the effort and from ICON it is easier to dynamically Tag vs update Group Membership.
Take a look at this thread. Also, ask your rep about a health check.