The CYFOX Network Scanner is a core component of the CYFOX cybersecurity platform. It is a non-intrusive, agentless scanning solution designed to provide network visibility, vulnerability assessment, and risk management.
The scanner actively probes network assets to gather critical data, including open ports, software vulnerabilities, and configuration details. This information is parsed into actionable insights to enhance network security and compliance.
The scanner's capabilities include:
Detecting open TCP and UDP ports.
Identifying misconfigurations and vulnerabilities in network devices
Providing data for real-time risk assessment and threat detection.
What are the differences between the scanner modes?
The Network Scanner offers multiple scanning profiles tailored to meet different operational needs. These profiles vary in the scope of ports scanned and the intensity of the scan, enabling organizations to balance thoroughness and resource efficiency.
Standard Mode: For detailed audits and vulnerability assessments in complex environments.
Basic Mode: For a balanced approach, prioritize efficiency without significant detail loss.
Light Mode: For routine checks or when system resources are constrained.
Quiet Mode: For environments sensitive to scanning activity or requiring stealth.
Which ports are scanned in each mode?
This table provides a clear overview of the TCP and UDP ports scanned in each mode. Based on the coverage and intensity required, choose the mode that best suits your network assessment needs.
Mode | TCP | UDP | Key Feature |
Standard | 1–10,000 | 53, 67–69, 88, 123, 153, 161, 162, 514, 520, 546, 547, 554, 5060 | Comprehensive scan covering a broad range of ports for detailed assessments. Suitable for in-depth audits. |
Basic | 1–5,000, 5985 | 53, 67–69, 88, 123, 153, 161, 162, 514, 520, 546, 547, 554, 5060 | Balanced coverage, providing moderate depth with faster scan times. Ideal for routine assessments. |
Light | 1–1,024, 5985 | 53, 67–69, 88, 123, 153, 161, 162, 514, 520, 546, 547, 554, 5060 | Lightweight scan focusing on essential ports. Designed for resource-constrained environments. |
Quiet | 21–25, 53, 67–69, 80, 88, 110, 111, 153, 143, 443, 993, 995, 1723, 3306, 3389, 5900, 5985, 8080 | 21–25, 53, 67–69, 80, 88, 110, 111, 153, 143, 443, 993, 995, 1723, 3306, 3389, 5900, 5985, 8080 | Minimal impact scan, targeting commonly used ports. Ideal for sensitive environments requiring low network noise. |
Can I customize the ports being scanned?
Yes, CYFOX allows the customization of port profiles. Administrators can define specific port ranges and assign custom profiles to individual hosts or groups, ensuring scans align with unique network requirements.
For more details on configuring port profiles, refer to the Port Profiles section in the CYFOX User Guide.