# Insight VM Scan Engine - Agent Communication Flow

**URL:** <https://discuss.rapid7.com/t/insight-vm-scan-engine-agent-communication-flow/5927>\
**Category:** InsightVM\
**Tags:** InsightVM\
**Created:** [July 19, 2021, 4:07pm UTC](https://discuss.rapid7.com/t/insight-vm-scan-engine-agent-communication-flow/5927 "2021-07-19T16:07:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lee\_77777](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/l/e99b99/32.png) [@Lee\_77777](https://discuss.rapid7.com/u/Lee_77777)\
**Post date:** [July 19, 2021, 4:07pm UTC](https://discuss.rapid7.com/t/insight-vm-scan-engine-agent-communication-flow/5927/1 "2021-07-19T16:07:53Z")

</div>

What are the communication / data flows between the InsightVM Scan Engine and Agent (on Asset)?

I assumed it’s unidirectional from the Scan Engine to the Agent, but couldn’t find a confirmation in R7 docs or forums. I did find docs indicating the agent collects data and does initiate communication to collectors - the agent can perform bi-directional (initiate/receive).

If available, please share the resource link with the answer.

---

<div class="post-metadata">

**Author:** ![gina\_seiber](https://discuss.rapid7.com/user_avatar/discuss.rapid7.com/gina_seiber/32/1633_2.png) [@gina\_seiber](https://discuss.rapid7.com/u/gina_seiber)\
**Post date:** [July 20, 2021, 2:01pm UTC](https://discuss.rapid7.com/t/insight-vm-scan-engine-agent-communication-flow/5927/2 "2021-07-20T14:01:55Z")

</div>

Hi Lee! The Scan Engine will only communicate with the Agents on assets in the event that you have enabled complementary scanning as part of your configuration ([more details can be found here](https://docs.rapid7.com/insightvm/enable-complementary-scanning-for-scan-engines-and-insight-agents/)) there’s a _somewhat decent-ish_ diagram there that displays this. Otherwise, they’ll only encounter them when they are actually scanning the asset as they would any other software installed on the asset. The collectors will be a separate piece(s) of infrastructure deployed, in some environments, should you choose but not all customers will have these deployed.

Is there something else specific you’re hoping to answer that is ultimately driving you to ask this question to begin with? 🙂

---

<div class="post-metadata">

**Author:** ![Lee\_77777](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/l/e99b99/32.png) [@Lee\_77777](https://discuss.rapid7.com/u/Lee_77777)\
**Post date:** [July 20, 2021, 2:38pm UTC](https://discuss.rapid7.com/t/insight-vm-scan-engine-agent-communication-flow/5927/3 "2021-07-20T14:38:39Z")

</div>

Okay, so in my simple terms. The Scanner to Asset is unidirectional in communication.

Thank you for the resource link. What is the port the scanner needs to communicate to the asset?