Verify scanning health
On a monthly or quarterly basis, review Internal Vulnerability Assessment (IVA) Scanner scanning health:
Check IVA Scanner connectivity
Arctic Wolf alerts you if an IVA Scanner goes offline, but you can manually check IVA Scanner connectivity at any time.
Check the IVA Scanner rate
Make sure assets are scanned at an appropriate interval. In general, a scanner scans approximately 150–250 assets in an 8-hour period. The number of assets changes based on the type of system and environment. For example, if several large subnets of assets are scanned weekly in an 8-hour scan window, it can take more than a month to complete a full cycle of scanning.
If you have concerns about your environment not being scanned in a timely manner, contact your CST at security@arcticwolf.com to review the scheduling. To optimize scanning without increasing the scan window, you can deploy additional physical scanners. This allows you to scan multiple subnets in parallel. Adding resources to virtual scanners does not result in any meaningful increase in scan throughput because they would consume additional resources.