Fortinet white logo
Fortinet white logo

Administration Guide

7.2.0

Scan results report

Scan results report

The Scan Results Report provides Success and Failure rates for each Scan in your database. Data is broken out by operating system. See Preview standard report templates for instructions on generating this report.

Note that a host may be scanned more than once, particularly if it does not pass the scan the first time. Each time a host is scanned the totals are incremented. For example, if a host was scanned and failed nine times and then scanned and passed once, the Success total is incremented by one, the Failure total is incremented by nine, the total for the Scan name is incremented by ten and the total for all scans is incremented by ten.

Typically, a host will not be evaluated against more than one Scan unless something about that host changes. For example, assume you have a user who is typically at a desk and is assigned an endpoint compliance policy for employees. The user is invited to a meeting and goes to a different corporate building. When he connects to a switch there, he is assigned a different policy based on his new connection location. In a case like this a host might be counted in more than one scan because it was indeed evaluated by two different Scans contained within two different endpoint compliance policies.

As you drill down into the details windows the report becomes more and more granular causing the totals to increase. In the samples shown below the Default scan starts out with 40 scans. However, as the individual requirements for each scan are counted the numbers increase to 2580. For any given scan you can require antivirus. Within those categories you can indicate what the preferred software is. For example, your company may prefer that users have AVG on their hosts but allow several other brands of antivirus software. If a user has no antivirus software on his host, the host fails the scan for the preferred antivirus. The number of failures for the preferred antivirus does not indicate the number of hosts with no antivirus. It simply indicates the number of times a scan ran and failed. The same host could have been scanned and failed multiple times.

Scan results settings

Field

Definition

General

Start Time

Start time and date of the report selected when the report was requested.

End Time

End time and date are set automatically to the time and date that you view the report.

Scan list

Policy

Name of the scan used to evaluate the host.

Type

Type of scan engine. Types include: System, Nessus, Admin and Agent. Agent scans are run using the Persistent Agent, Mobile Agent, Dissolvable Agent, or the Passive Agent. For information on System, Nessus and Admin Scans see Add a scan.

Success

Number of times hosts passed the scan. This scan may have been run on the same host more than once. Each time a scan is run it increments the totals.

Failure

Number of times hosts failed the scan. This scan may have been run on the same host more than once. Each time a scan is run it increments the totals.

Totals

Totals for Successful scans, Failed scans and all scans performed within the time range you selected.

Details Button

Click to display additional details about a specific Scan.

OS

Total scans broken down by host operating system.

Scan details settings

Field

Definition

General

Start Time

Start time and date of the report selected when the report was requested.

End Time

End time and date are set automatically to the time and date that you view the report.

OS list

Type

Type of scan engine. Types include: System, Nessus, Admin and Agent. Agent scans are run using the Persistent Agent, Dissolvable Agent, or the Passive Agent. For information on system, Nessus, and admin scans, see Add a scan.

Totals

Total number of scans broken down by host operating systems using the policy selected in the previous page. This does not indicate the number of hosts scanned because a single host could be scanned more than once.

Scan categories

Type

Indicates the type of scan engine used to scan the host.

Category

Lists categories included in the selected policy for which the engine is scanning, such as operating system or antivirus. This indicates that there are requirements in the policy for these types of items. For example, if you have indicated in your policy that users must have either AVG or McAffee as an antivirus, then each host that is assigned this policy is scanned for items in the antivirus category.

Success

Number of successful scans for items within the category.

Failure

Number of failed scans for items within the category.

Totals

Total scans that succeeded, failed and the sum of all scans that were run.

Additional details settings

Field

Definition

General

Start Time

The start time and date of the report selected when the report was requested.

End Time

The end time and date is set automatically to the time and date that you view the report.

OS list

OS Details

Total occurrences of the selected scan broken down by operating systems of the hosts that were scanned. This view breaks the list of operating systems down by providing more information about specific service packs or versions.

Category list

Type

Type of scan engine. Types include: System, Nessus, Admin, and Agent. Agent scans are run using the Persistent Agent, Dissolvable Agent, or the Passive Agent. For information on System, Nessus and Admin Scans see Add a scan.

Category

Lists categories included in the selected policy for which the engine is scanning, such as operating system or antivirus. This indicates that there are requirements in the policy for these types of items. For example, if you have indicated in your policy that users must have either AVG or McAffee as an antivirus, then each host that is assigned this policy is scanned for items in the antivirus category.

Name

Name of the specific required item for which the engine is scanning, such as AdAware 2007 or Windows Vista Edition.

Success

Number of successful scans for a specific item within the category.

Failure

Number of times hosts failed the scan for a specific item.

Totals

Total scans for specific items that succeeded, failed and the sum of all scans that were run.

Scan results report

Scan results report

The Scan Results Report provides Success and Failure rates for each Scan in your database. Data is broken out by operating system. See Preview standard report templates for instructions on generating this report.

Note that a host may be scanned more than once, particularly if it does not pass the scan the first time. Each time a host is scanned the totals are incremented. For example, if a host was scanned and failed nine times and then scanned and passed once, the Success total is incremented by one, the Failure total is incremented by nine, the total for the Scan name is incremented by ten and the total for all scans is incremented by ten.

Typically, a host will not be evaluated against more than one Scan unless something about that host changes. For example, assume you have a user who is typically at a desk and is assigned an endpoint compliance policy for employees. The user is invited to a meeting and goes to a different corporate building. When he connects to a switch there, he is assigned a different policy based on his new connection location. In a case like this a host might be counted in more than one scan because it was indeed evaluated by two different Scans contained within two different endpoint compliance policies.

As you drill down into the details windows the report becomes more and more granular causing the totals to increase. In the samples shown below the Default scan starts out with 40 scans. However, as the individual requirements for each scan are counted the numbers increase to 2580. For any given scan you can require antivirus. Within those categories you can indicate what the preferred software is. For example, your company may prefer that users have AVG on their hosts but allow several other brands of antivirus software. If a user has no antivirus software on his host, the host fails the scan for the preferred antivirus. The number of failures for the preferred antivirus does not indicate the number of hosts with no antivirus. It simply indicates the number of times a scan ran and failed. The same host could have been scanned and failed multiple times.

Scan results settings

Field

Definition

General

Start Time

Start time and date of the report selected when the report was requested.

End Time

End time and date are set automatically to the time and date that you view the report.

Scan list

Policy

Name of the scan used to evaluate the host.

Type

Type of scan engine. Types include: System, Nessus, Admin and Agent. Agent scans are run using the Persistent Agent, Mobile Agent, Dissolvable Agent, or the Passive Agent. For information on System, Nessus and Admin Scans see Add a scan.

Success

Number of times hosts passed the scan. This scan may have been run on the same host more than once. Each time a scan is run it increments the totals.

Failure

Number of times hosts failed the scan. This scan may have been run on the same host more than once. Each time a scan is run it increments the totals.

Totals

Totals for Successful scans, Failed scans and all scans performed within the time range you selected.

Details Button

Click to display additional details about a specific Scan.

OS

Total scans broken down by host operating system.

Scan details settings

Field

Definition

General

Start Time

Start time and date of the report selected when the report was requested.

End Time

End time and date are set automatically to the time and date that you view the report.

OS list

Type

Type of scan engine. Types include: System, Nessus, Admin and Agent. Agent scans are run using the Persistent Agent, Dissolvable Agent, or the Passive Agent. For information on system, Nessus, and admin scans, see Add a scan.

Totals

Total number of scans broken down by host operating systems using the policy selected in the previous page. This does not indicate the number of hosts scanned because a single host could be scanned more than once.

Scan categories

Type

Indicates the type of scan engine used to scan the host.

Category

Lists categories included in the selected policy for which the engine is scanning, such as operating system or antivirus. This indicates that there are requirements in the policy for these types of items. For example, if you have indicated in your policy that users must have either AVG or McAffee as an antivirus, then each host that is assigned this policy is scanned for items in the antivirus category.

Success

Number of successful scans for items within the category.

Failure

Number of failed scans for items within the category.

Totals

Total scans that succeeded, failed and the sum of all scans that were run.

Additional details settings

Field

Definition

General

Start Time

The start time and date of the report selected when the report was requested.

End Time

The end time and date is set automatically to the time and date that you view the report.

OS list

OS Details

Total occurrences of the selected scan broken down by operating systems of the hosts that were scanned. This view breaks the list of operating systems down by providing more information about specific service packs or versions.

Category list

Type

Type of scan engine. Types include: System, Nessus, Admin, and Agent. Agent scans are run using the Persistent Agent, Dissolvable Agent, or the Passive Agent. For information on System, Nessus and Admin Scans see Add a scan.

Category

Lists categories included in the selected policy for which the engine is scanning, such as operating system or antivirus. This indicates that there are requirements in the policy for these types of items. For example, if you have indicated in your policy that users must have either AVG or McAffee as an antivirus, then each host that is assigned this policy is scanned for items in the antivirus category.

Name

Name of the specific required item for which the engine is scanning, such as AdAware 2007 or Windows Vista Edition.

Success

Number of successful scans for a specific item within the category.

Failure

Number of times hosts failed the scan for a specific item.

Totals

Total scans for specific items that succeeded, failed and the sum of all scans that were run.