# Internal Vulnerability Scanning

## Overview

Internal Vulnerability Scanning continuously assesses internal servers, endpoints, and network devices for vulnerabilities, misconfigurations, and outdated software, with results centralised in the console to support monitoring, prioritisation, and remediation tracking.

## Deployment

Please open a ticket to our support team requesting an internal vulnerability scanner to gain access to this service.

## Configuration

#### 1. Accessing the Scanner

Log into scanner GUI with the IP Address of the appliance on port 8443

e.g. [https://vulnscannerIP:8443](https://127.0.0.1:8443/)

#### 2. Creating a new scan

Navigate to Scans → Tasks → Then click the new task icon → New task

<figure><img src="/files/j53h1KDKqrF1GxjqOxBc" alt=""><figcaption></figcaption></figure>

Configuration

* Name the new scan

#### 3. Create a new target

In the same New Task prompt, select the Paper + Star icon beside Scan Targets

<figure><img src="/files/7DfJGdKc21dWvGXayI8y" alt="" width="563"><figcaption></figcaption></figure>

Proceed to add hosts by either typing them in or importing from a CSV file.

* Port list = All TCP and Nmap top 100 UDP
* Alive test = ICMP & TCP-ACK service Ping\
  then save.

<figure><img src="/files/Cg0Lr9cMbrtSipOkJoQu" alt="" width="497"><figcaption></figcaption></figure>

Configure the options as below:

* Alterable task = yes
* Auto delete = yes last 5

Then click Save.

<figure><img src="/files/HH1slJxoy1DPIx8Foqfz" alt=""><figcaption></figcaption></figure>

#### 6. Create a schedule.

Click on the icon circled below to schedule in the task editor. Set the first runtime and the timezone. Leave Run Until as default, and specify how often to run under “Recurrence”

<figure><img src="/files/LLnZ11ip9aUNQ4myskQI" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/nClrdir8MTFcSOMP0Clx" alt=""><figcaption></figcaption></figure>

## Having Trouble?

If you're having any issues with user management, please open a request via the support portal, or email our support email at "<socv2@cybrhawk.com>" and our team will assist you.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://cybrhawksoc.gitbook.io/cybrhawk-docs/attack-surface-management/vulnerability-scanning/internal-vulnerability-scanning.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
