Vulnerability Scan Notifications

To avoid false alarms when scan activity is high, notify asset owners of the timing of scans.

Some JSA Vulnerability Manager scan tools, such as web tools, can generate a large amount of traffic. For example, a web scan might send 500 HTTP requests per second to HTTP servers. If asset owners see an unusual amount of traffic, they might think that the asset that is being scanned is subject to a DOS attack or similar attack.

You must have the correct license capabilities to perform the following scanning operations. If you need assistance to obtain a new or updated license key, contact your Juniper Customer Support.

Configure scan profiles to send emails to asset owners and other interested parties before and after a scan so that asset owners are aware that a larger than usual amount of network traffic or load might occur in their network. Another way to make asset owners aware of asset scan times, is to agree to a scanning schedule with the asset owners.

Configure email notification from the Email tab of the scan profile.