Understand the configuration fields that define each agentless discovery target type. Identify which fields appear dynamically for different target category and probe types in the Configure Scan Target Details page so that you can configure discovery targets accurately.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service that have Discovery enabled. |
Network Scans
Perform deep host scans of physical and virtual hosts across various operating systems and networking devices. The available probe types are deep host scan (WMIC, SSH, SNMP) and deep host scan (SSH, SNMP, PowerShell).
| Field | Description |
|---|---|
| Discovery Application | Discovery application installed on a Windows host that executes the scan. |
| Network Configuration | Option that defines whether to scan by IP range or hostname. |
| Included IP Range | IP addresses or subnets included in the scan scope. |
| Excluded IP Range | IP addresses or subnets excluded from the scan. |
| Available Credentials / Selected Credentials |
Credentials used to authenticate access to systems in the defined scan range. To select credentials for authentication, move them from the Available Credentials column to the Selected Credentials column. To define the sequence in which the credentials are used for authentication, reorder them in the Selected Credentials column using the up and down arrows. For more information on how to create new credentials, see Create Discovery Credentials for Secure Scanning. |
Cloud, Virtualization, and Infrastructure
AWS Cloud Discovery
| Field | Description |
|---|---|
| AWS Credentials | Credentials that authenticate with the AWS account. |
| AWS Resources |
AWS components included in the discovery scan. The resources include:
|
| Add Credentials | Option to create new AWS credentials directly from the Configure Scan Target Details. |
vCenter Scans
| Field | Description |
|---|---|
| vCenter Credentials | Credentials that authenticate with the vCenter environment. |
| Included IP Range | IP addresses or subnets of the ESXi hosts included in the scan. |
| Excluded IP Range | IP addresses or subnets of the ESXi hosts to be excluded from the scan. |
Azure Cloud Discovery
| Field | Description |
|---|---|
| Azure Credentials | Credentials that authenticate with the Azure account. |
| Azure Resources |
Azure resources included in the discovery scan. The list of resources include:
|
| Add Credentials | Option to create new Azure credentials directly from the Configure Scan Target Details. |
Prescan and Utilities
Host Ping
| Field | Description |
|---|---|
| Included IP Range | Included IP Range IP addresses or subnets used to test network reachability before running full scans. |
| Excluded IP Range | IP addresses or subnets excluded from prescan validation. |
- 192.168.1.1 (single IP)
- 192.168.1.4,192.168.2.4 (comma-separated IPs)
- 192.168.1.4-5,9 (IP range in same subnet)
- 192.168.4.0/22 (single subnet)
- 192.168.0.0/23 192.168.1.1 (mix of subnet and IP)