Network Definitions

On the Network Definitions tab you can create, edit and delete networks, and run and view scans. This section is also used to view the results of the discovery and monitoring jobs by linking directly to the Results tab for a selected network.

Discovery jobs attempt to initiate TLS TLS (Transport Layer Security) and its predecessor SSL (Secure Sockets Layer) are protocols for establishing authenticated and encrypted links between networked computers. connections to specified IP addresses and ports or ranges of IP addresses and ports. If a TLS connection is successful, the certificates provided by the target server as part of the TLS handshake are downloaded for further inspection and importation into the Keyfactor Command database. Locations that provide any level of response during the connection attempt (don’t time out) are shown in the results grid when the discovery scan finishes regardless of whether a certificate was successfully downloaded. If a TCP connection is established, but a TLS connection is not, an SSL TLS (Transport Layer Security) and its predecessor SSL (Secure Sockets Layer) are protocols for establishing authenticated and encrypted links between networked computers. connection will be attempted. Any certificate obtained via SSL connection will be imported into the Keyfactor Command database. If a TLS connection is successful, an SSL connection will not be attempted.

Monitoring jobs scan a chosen set of locations that have already been discovered by a discovery job scan. Like discovery jobs, monitoring jobs attempt to initiate TLS connections with the locations specified. In the case of monitoring jobs, however, a certificate is expected at the endpoint An endpoint is a URL that enables the API to gain access to resources on a server. since endpoints are generally identified for monitoring if they have certificates that need monitoring. As a result, monitoring jobs report on timeouts as well as connection failures and successes.

The network definitions grid includes these fields:

Name The name of the network. Orchestrator Pool The name of the orchestrator pool (see Orchestrator Pools Definition). Discovery Status The current status of the discovery job for the network, if configured. The possible statuses are: Scheduled indicates a job has been scheduled but has never run. Last Scanned indicates a job has run to completion. The date indicates when the job finished. Running indicates a job is currently in progress. The percentage complete shown will be zero for small jobs for the entire duration of the job because this value is updated upon completion of each segment of a scan job (and small jobs generally consist of only one segment). In Quiet Hours indicates that a quiet hours time window for the job is currently in effect and no jobs can be run (see SSL Network Operations). Disabled indicates that the Scanning Enabled box has been unchecked in the network definition (see SSL Network Operations). No scanning jobs will be run when the network is in this state.

Monitor Status The current status of the monitoring job for the network, if configured. The possible statuses are the same as those for discovery. Description The description entered in the network definition.