Agentless Scan – Prerequisites

Modified on Fri, 18 Jul at 1:32 AM

Objective

The Saner Agentless Scanner offers a powerful alternative to traditional agent-based scanning by allowing you to perform on-demand vulnerability and misconfiguration scans on your devices without deploying an agent. It also supports scheduled scans for regular assessments.

This scanner uses SMB (for Windows) and SSH (for Linux/Mac) to authenticate and connect to remote devices. However, to enable successful scans, the target machines must meet certain connectivity and configuration prerequisites, detailed below.

Prerequisites for Agentless Scanning (Windows)

Port Connectivity

To confirm that the SMB port (TCP 445) is reachable from the scanner:


Test-NetConnection -ComputerName 172.16.16.110 -Port 4

Verify Admin Share (C$) Access

Check if the admin share (C$) is accessible on the target device:


net use \\target-ip-address\c$

If C$ is enabled and credentials are required, use the following command format:

net use \\172.16.16.110\C$ /user:172.16.16.110\secpod secpod

System Requirements on Target Devices

TCP Port 445 must be accessible from the Saner Agentless Scanner to the target device.
File and Print Sharing must be enabled on the target system.
The administrative share (C$) must be accessible.
The following Windows Registry key should be set:
```
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
LocalAccountTokenFilterPolicy = 1
```
This setting allows remote access with local administrative credentials.

Summary:

Ensuring these prerequisites are met allows the Saner Agentless Scanner to successfully connect to your systems, authenticate securely, and carry out scans efficiently — all without requiring an agent to be installed.