Skip to main content
All CollectionsFAQs
CYFOX Network Scanner Modes and Ports
CYFOX Network Scanner Modes and Ports
Omer Kushmirski avatar
Written by Omer Kushmirski
Updated over a month ago

The CYFOX Network Scanner is a core component of the CYFOX cybersecurity platform. It is a non-intrusive, agentless scanning solution designed to provide network visibility, vulnerability assessment, and risk management.

The scanner actively probes network assets to gather critical data, including open ports, software vulnerabilities, and configuration details. This information is parsed into actionable insights to enhance network security and compliance.

The scanner's capabilities include:

  • Detecting open TCP and UDP ports.

  • Identifying misconfigurations and vulnerabilities in network devices

  • Providing data for real-time risk assessment and threat detection.

What are the differences between the scanner modes?

The Network Scanner offers multiple scanning profiles tailored to meet different operational needs. These profiles vary in the scope of ports scanned and the intensity of the scan, enabling organizations to balance thoroughness and resource efficiency.

  • Standard Mode: For detailed audits and vulnerability assessments in complex environments.

  • Basic Mode: For a balanced approach, prioritize efficiency without significant detail loss.

  • Light Mode: For routine checks or when system resources are constrained.

  • Quiet Mode: For environments sensitive to scanning activity or requiring stealth.

Which ports are scanned in each mode?

This table provides a clear overview of the TCP and UDP ports scanned in each mode. Based on the coverage and intensity required, choose the mode that best suits your network assessment needs.

Mode

TCP

UDP

Key Feature

Standard

1–10,000

53, 67–69, 88, 123, 153, 161, 162, 514, 520, 546, 547, 554, 5060

Comprehensive scan covering a broad range of ports for detailed assessments. Suitable for in-depth audits.

Basic

1–5,000, 5985

53, 67–69, 88, 123, 153, 161, 162, 514, 520, 546, 547, 554, 5060

Balanced coverage, providing moderate depth with faster scan times. Ideal for routine assessments.

Light

1–1,024, 5985

53, 67–69, 88, 123, 153, 161, 162, 514, 520, 546, 547, 554, 5060

Lightweight scan focusing on essential ports. Designed for resource-constrained environments.

Quiet

21–25, 53, 67–69, 80, 88, 110, 111, 153, 143, 443, 993, 995, 1723, 3306, 3389, 5900, 5985, 8080

21–25, 53, 67–69, 80, 88, 110, 111, 153, 143, 443, 993, 995, 1723, 3306, 3389, 5900, 5985, 8080

Minimal impact scan, targeting commonly used ports. Ideal for sensitive environments requiring low network noise.

Can I customize the ports being scanned?

Yes, CYFOX allows the customization of port profiles. Administrators can define specific port ranges and assign custom profiles to individual hosts or groups, ensuring scans align with unique network requirements.

For more details on configuring port profiles, refer to the Port Profiles section in the CYFOX User Guide​.

Did this answer your question?