[ Applies to ] StorageGuard 9.x and later / All supported storage, backup, SAN and cloud systems / Windows and Linux deployments
Start small. Scan one system, or one data source, and confirm it was fully scanned before you scan everything. Problems with credentials, permissions or network paths show up here, while there are only a few systems to look at. Once each platform scans cleanly, create a scan task for your whole environment and run it.
Note: A scan collects configuration data only. Findings appear after a security risk analysis runs against your enabled security policies. See Understand security policies, labels and checks.
In this article
Before you begin
- Your systems are discovered or added, and enabled. See Discover systems and choose what to scan.
- Each data source shows Connection Verified.
Scan a single system or data source
A single system
Open the system's Systems page, right-click the system and select Scan. StorageGuard runs a full scan of that system right away. The Systems page for each category is listed in Choose which systems to scan.
Every system behind a data source
Open the Data Sources page for the category, right-click the data source and select Scan. StorageGuard scans the systems in that data source's scope, which is useful for a management system that reports on many arrays or switches.
Tip: Scan one system of each platform first. If a credential or permission is wrong, you'll find it on one system instead of a hundred.
Confirm the scan succeeded
When the scan finishes, check any of the following pages:
| Where | What to check |
|---|---|
| Assets > Inventory | The Scan Status and Scan Errors columns for every system you scanned. |
| Systems and Data Sources pages | Scan Status shows Fully Scanned, and Scan Errors is empty. When Scan Errors shows a number, click it to see the issues behind it. For other statuses, see Check a system’s status. |
| Settings > Diagnostics > Data Collection > Issues | No open data collection issues (failed API calls, access denied errors, etc.). |
| Settings > Admin > Health Check | A recent Last Scan, and no failed scans under Asset Inventory & Scan Status. Last Scan reflects scan tasks only, not scans of a single system or data source. |
Drill into a scan in Task Manager
- Click the Task Manager icon in the top-right corner.
- Select a tab: Active for scans still running, Finished, Failed, or All.
- On the task, click the ... menu and select Scan Overview.
- Open Commands to see each command the scan ran and its result. The ... menu has more views of the same task.
Tip: To follow a scan while it runs, keep Task Manager open on the Active tab.
Schedule a scan task
When each platform scans cleanly, create a scan task that covers your whole environment.
- Go to Settings > Schedule.
- Click + and select Scan Task.
- In Task Identifier, enter a name, for example Full environment scan.
- In Time Zone, select the time zone the start time refers to. For example, with America/New_York and 10:00 AM, the task starts at 10:00 AM New York time.
- In Max Task Duration, set a limit long enough for your whole environment. If the scan reaches the limit, it stops.
- Choose when the task runs: One time, Weekly schedule or Monthly schedule, and set the date or days and the time.
- Under scope, select All items in scope to scan every enabled system, or Select Scope to pick systems, sites or CI groups.
- Click Save. The task appears on the Schedule page.
To collect data and analyze it in one task, schedule a Full Cycle instead.
Run a task now
You don't have to wait for a task's scheduled time. Run it on demand to start your first full scan straight away, or to rescan after fixing errors.
- Go to Settings > Schedule.
- Select the task and click Run Now.
- Watch the task's Status icon, which rotates while the task runs. Click Last Execution to see each system being scanned and its status, or follow it in Task Manager on the Active tab.
When the task finishes, check the results as described in Confirm the scan succeeded. Running a task now doesn't change its schedule.
[ Next step ]
If every system is fully scanned, explore the configuration baseline policies, decide what to enable or create your own. Otherwise, fix scan errors first.
Related articles
[ Still need help? ]
Our support team can help with connecting systems and scan setup. Submit a request
Comments
0 comments
Please sign in to leave a comment.