List of Scans

The List of Scans section in the Quantum Trust Hub dashboards is, as the name suggests, a holistic list of all the PQC-focused scans run on your cryptographic environment.
This includes the agent-based scans run via the AppViewX code and config scan agents, as well as the agentless network discovery scans triggered using the existing network discovery scan flow from the CERT+ module.
Note:
  • Agentless scans are currently limited to network discovery for certificates and protocols; library discovery is not supported.
  • For agentless scans under the existing certificate network scan, only IP range and subnet–based scans are supported; URL-based scans are not applicable.
  • Agentless scans are listed under the List of Scans even if the AppViewX Config Scan Agent is not installed, since they do not require agent intervention.
Important: For the same IP and ports scanned for both, agent-based as well as agentless scans, the following rules will apply:
  • If an agent-based scan is performed after an agentless scan, data from the agent-based scan will replace the data from the agentless scan.
  • If an agentless scan is performed after an agent-based scan:
    • Data for the newly discovered ciphers and protocols, from the scannedIP/port, will be added to the inventory.
    • Existing service binding and library app information will not be modified.

Prerequisite: Verify that your user role has the required ACF permission to view list of scans. To enable ACF permission, click here.

For each scan type, this inventory lists the following details:

  • Scan Name

    User-defined name for the scan, to identify individual scans

  • Scan Host IP

    IP address or IP range targeted during the scan

  • Host FQDN

    Fully qualified domain name (FQDN) of the scanned host, if available

    Displays – when the FQDN is not resolved or not applicable

  • Scan type
    Method used to perform the scan: agent-based (executed using the AppViewX Config Scan Agent or the AppViewX Code Scan Agent) or agentless (executed using the existing network discovery scan flow from the CERT+ module)
    Note: Agentless scans only discover certificates and protocols; libraries are currently out of the scope of agentless scans and are discovered only in agent-based scans.
  • User

    Username of the account that initiated/executed the scan

  • Scan Date

    Calendar date on which the scan was performed

  • Start Time

    Start time of the scan execution

  • End Time

    End time of the scan execution

  • Assessed Crypto Category

  • Cryptographic categories assessed as part of the scan

  • Scan Status

    Outcome of the scan execution

    You can also download/view the scan summary from this column. For instructions, see Downloading a Scan Summary Report.

Common inventory functions

Feature Description
Filters To filter the inventory for viewing specific data:
  1. From one or more of the following dropdown lists, select the required filtering criteria:
    • Scan Type
    • Crypto Category
    • Status
  2. Click Apply.
Search Enter free text or keywords to search for specific entries in the inventory.
Export To export the inventory data:
  1. Select at least one record from the inventory to export the corresponding data.
  2. From the menu bar, click Export.
  3. From the How would you like to download the data? Dialog box, select your preferred export file format (CSV or XLS).
  4. Click Submit.
The inventory data is downloaded to your local system as a zipped file.
Pagination Use the pagination control dropdown to select the number of records that will be displayed per page of the inventory.

You can select to display 25, 50, 75, or 100 records per page of the inventory.
Pagination Navigation Use the pagination navigation buttons to move between the pages in the inventory.
Refresh Use the Refresh button to reload the inventory to display the up-to-date records.

Downloading a Scan Summary Report

Scan summary reports for the configuration scan, code scan, and network scan can be downloaded from the Quantum Trust Hub.
Note: The download summary scan report feature is RBAC-governed.

To authorize this feature for a user role, modify the Authorized Functions for that role to enable the Quantum Trust Hub > Publish Reports function.

For more details, see Managing Roles in the Platform User Guide.

Method 1

  1. Go to (Menu) > Quantum Trust Hub > Dashboard > List of Scans.
  2. From the scans inventory, for the required scan, under the Scan Status column, click (Download scan report for audit).
  3. From the menu displayed, select the file format for the exported data.
  4. Save the exported file on your local file system, as required.

Method 2

  1. Go to (Menu) > Quantum Trust Hub > Dashboard > List of Scans.
  2. From the scans inventory, for the required scan, under the Scan Status column, click the scan status value (View scan details).
    The corresponding Scan Status Summary is displayed.
  3. From the Download reports dropdown list, select the file format for the exported data.
  4. Save the exported file on your local file system, as required.