How To Perform Agentless Scan

This section covers the following topics:

• Overview
• How an Agentless Scan Works
• Agentless Scan Requirements
• Supported Operating Systems
• Start an Agentless Scan

Overview

You can use ER Cloud to perform an agentless scan on network Targets via a proxy agent. Agentless scans allow you to perform a scan on a target system without having to:

1. Install a Node Agent on the Target host, and
2. Transmit sensitive information over the network to scan it.

Use agentless scans when:

• The Node Agent is installed on a host other than the Target host.
• Data transmitted over the network must be kept to a minimum.
• The Target credential set has the required permissions to read, write and execute on the Target host.
• The Target host security policy has been configured to allow the scanning engine to be executed locally.

For more information, refer to Agentless Scan Requirements below.

How an Agentless Scan Works

For a more detailed explanation on agentless scans, refer to the Scanning - How Agentless Scan Works section.

Agentless Scan Requirements

Make sure that the Target and Proxy Agent host fulfill the following requirements:

¹ TCP Port allowed connections.

Supported Operating Systems

ER Cloud supports the following operating systems as agentless scan Targets:

Microsoft Windows Operating Systems

Ground Labs supports and tests ER Cloud for all Windows versions supported by Microsoft.

Prior versions of Windows may continue to work as expected. However, Ground Labs cannot guarantee support for these versions indefinitely.

Linux Operating Systems

Ground Labs supports and tests ER Cloud for all Linux distributions currently supported by the respective providers.

Prior versions of Linux distributions may continue to work as expected. However, Ground Labs cannot guarantee support for these versions indefinitely.

macOS Operating Systems

Ground Labs supports and tests ER Cloud for all macOS versions supported by Apple Inc.

Prior versions of macOS may continue to work as expected. However, Ground Labs cannot guarantee support for these versions indefinitely.

Start an Agentless Scan

To perform an agentless scan on a Target:

1. Log in to the ER Cloud Web Console.
2. Navigate to the Select Locations page by clicking on:
   • Scans > New Scan, or
   • the New Scan button in the Dashboard, Targets, or Scans > Schedule Manager page.
3. On the Select Locations page, click + Add Unlisted Target.
4. In the Select Target Type window, choose Server and enter the host name of the Target in the Enter New Target Hostname field.
5. Click Test. If ER Cloud can connect to the Target, the button changes to a Commit button.
6. In the Select Types dialog box, select Target locations from Local Storage or Local Process Memory, select the Target type, and click Done.
7. In the New Target page:
   1. Assign Target Group - Assign the Target to the Target Group selected from the dropdown box.

   2. Specify the Operating System of the Target - Select the operating system for the Target host from the dropdown box.

      Ensure that you select the correct operating system for the Target host. Certain features in ER Cloud (e.g. PRO Data Classification with MIP, PRO Data Access Management) may not work as expected if the selected operating system is incorrect or is set to "Remote Access Only".
8. Click Next.
9. The UI prompts you if there is no usable Agent detected on the Target host. Select Would you like to search this target without installing an agent on it? to continue.

10. Fill in the following fields and click Next:
    

    Field	Description
    Credential Label	Enter a descriptive label for the credential set.
    Username	Enter the Target host user name.
    Password	Enter the Target host user password or passphrase for the private key.
    (Optional) Private Key	Upload the file containing the private key. Only required for Target hosts that use a public key-based authentication method. For more information, refer to Set Up SSH Public Key Authentication.
    Agent to act as proxy host	Select a suitable Proxy Agent. Use the pre-configured Linux cloud Agents to scan cloud Targets only. For the list of Targets according to the type, refer to Target Types in the Add Targets section. For more information about Agents in ER Cloud, refer to the About Enterprise Recon Cloud 2.12.0 section.

11. On the Select Data Types page, select the Data Type Profiles to be included in your scan and click Next. Refer to the Use Data Type Profiles section.
12. Set a scan schedule in the Set Schedule section. Refer to the Set Schedule section.
13. Click Next.
14. Review your scan configuration. Once done, click Start Scan.