CA Configuration Automation

 View Only
  • 1.  CCA NDG Discovery outside the range.

    Broadcom Employee
    Posted Feb 19, 2020 04:14 AM
    Hi Team,

    I'm doing a simple exercise:

    Created a Credential Vault(Windows only).
    Created a Network Profile, Assign Pingsweep with Soft Agent policy and Credential Vault.
    In inclusion list I provide a list of IPs from Excel file.
    All IPs are from 10.17.x.x subnet.
    However after the job is executed I can see other IPs discovered as part of this Network Scan Job.
    10.1.x.x
    10.33.x.x
    etc...

    How is it possible that NDG discovers IPs from different subnets which are not included in my Network Profile?

    Regards,
    Pavel.


  • 2.  RE: CCA NDG Discovery outside the range.

    Broadcom Employee
    Posted Feb 19, 2020 07:58 AM
    Check the Network Policy Itself
    One of the options is: Follow Network Connection (or something similar, trying to remember off the top of my head, uncheck that
    When that is enabled, for every machine you scan from the inclusion list, it will determine the servers connected to it (via netstat) and attempt to discovery those, using the same credentials provided in from the scan


  • 3.  RE: CCA NDG Discovery outside the range.
    Best Answer

    Broadcom Employee
    Posted Feb 19, 2020 08:56 AM
    Hi Pavel,

    In the Network Scan Policy that you are using, under the "Discovery Options" tab you will see the checkbox option discovering "Network Connections".

    Uncheck this option to remove any network connections from being discovered for the targets hosts included in the Network Profile inclusion list.


    Regards,
    Kevin


  • 4.  RE: CCA NDG Discovery outside the range.

    Broadcom Employee
    Posted Feb 20, 2020 03:05 AM
    Thanks for reply guys.
    Hope this will help.