Scan Limiting

this section explains how scan allowances are applied to domains/ips for a scan allowances applied to seeds used to create a scan are covered in seeds and ips https //docs hexiosec com/asm/seeds and ips what are scan allowances? every licence plan has a domain and ip allowance applied to each scan type the impact of the scan allowance is domains and ips within the licence plan domain and ip allowance are fully processed and results are shown in the scan report domains and ips above the domain and ip allowance will not be fully processed and their results will not be included in the scan report the scan would then show that the allowance has been exceeded how does the domain and ip allowance work? the scan allowance is not just the seeds you use as the start point for the scan, it is based on all discovered domains and ips during the scan activity, which includes both primary and secondary domains and ips the overall scan size is a sum of the primary and secondary domains and ips the overall scan size is shown on the scans page and the scan overview shows the totals for the primary and secondary assets if your scan domain and ip allowance has been exceeded, then these numbers won't reflect all of the domains and ips that could be discovered, it will show how many were found before the scan stopped when it exceeded the allowance to make your scan smaller, consider splitting the scan seed domains and ips across more than one scan domain and ip allowances by scan type how the allowances affect your organisation will be dependent on the types of scans that your organisation runs for own monitoring scans, the allowance is applied across all of this type of scan the allowance applies to the total number of nodes across all of the organisation's own monitoring scans when the allowance has been used, any future own monitoring scans will not be fully scanned for ad hoc scans, the allowance is applied per scan the allowance is only applied to the scan that is being run, irrespective of the size of any previous scans future scans are not impacted if a previous ad hoc scan has exceeded the allowance for third party scans, the allowance is applied per scan the allowance is only applied to the scan that is being run, irrespective of the size of any previous scans monitoring usage the owner and admin roles are responsible for monitoring scan and domain/ip usage across their organisation usage information for all scan types can be accessed by the admin role via 'usage' approaching/reaching the domain and ip allowance limit when your organisation is getting close to, or reaches, its domain and ip allowance limit you will be alerted via warnings/alerts within hexiosec asm and in the scan and report notification emails the warnings and alerts will be visible to all users in your organisation when the domain and ip allowance has been exceeded, limited secondary domains and ips can be added as seeds, but will not be processed until the organisation is below its ip/domain allowance the scan will appear to run but will show that the nodes were not scanned; please note that the scan results will be incomplete if the limited scan is of the type where an allowance is applied per scan (e g ad hoc scans) then you may want to take a look at the domains in the scan report to see if you can split them out across more than one scan to mitigate the impact of the domain and ip allowance, scans can be deleted and will be placed into a soft delete state for 30 days, to allow recovery, before being hard deleted the reduction in the domain and ip usage will not take effect until the scan is hard deleted the domain/ip allowance can be increased by upgrading the organisation licence plan, please follow the upgrade link within hexiosec asm or contact us at support\@hexiosec com mailto\ support\@hexiosec com changes to allowances when changing licence plan if the domain and ip allowance is reduced as a result of changing a license plan, then previously included nodes may be marked as limited and excluded from future scan results if the allowance is increased, nodes will be added to the scan until the allowance limit is met in both cases, the scan results will not change immediately , but will update when the scan is next run