Getting Started with Saner Network Scanner: Features, Requirements, and Usage

Overview

The Saner Network Scanner is a powerful, agentless network scanning feature integrated within the Saner CVEM platform. It enables organizations to discover devices, analyze the network topology, identify vulnerabilities and misconfigurations, and assess the external security posture of endpoint systems, all without requiring additional hardware investments.

By leveraging eligible endpoints within your environment, Saner designates them as network scanners, offering a scalable and flexible solution for continuous network visibility and security monitoring.

Key Features

1. Network Discovery and Fingerprinting

• Detects all IP-enabled devices automatically.

• Identifies operating systems and running services.

• Maps the network topology for full infrastructure visibility.
  
  

2. Vulnerability and Misconfiguration Detection

• Scans for known vulnerabilities (CVEs) and misconfigurations.
  
  

3. Agentless Scanning

• No need to install the Saner Agent on target systems.

• Allows for vulnerability and compliance scans without deploying software.
  
  

4. Authenticated Network Scans

• Supports credential-based scanning for deeper insights.

• Credentials can be securely provided to scanning scripts.
  
  

5. Automated Periodic Scans

• Enables configuration of scheduled daily or recurring scans.

• Reduces manual efforts and ensures up-to-date posture assessment.
  
  

6. No Additional Hardware Required

• Eliminates the need for physical scanning appliances.

• Existing eligible endpoints are automatically designated as scanners.

Supported Platforms

Devices running the following operating systems can be designated as Network Scanners:

1. Windows – 32-bit and 64-bit

2. macOS

3. Linux – 64-bit only

These systems can actively perform network scanning tasks when designated as scanners within the Saner CVEM platform.

Unsupported Platforms:

The following operating systems cannot be used as Saner Network Scanners:

1. Linux (32-bit)

2. Alpine Linux – both 32-bit and 64-bit

3. AIX – both 32-bit and 64-bit

Prerequisites

To use the Saner Network Scanner feature, ensure the following:

1. Active Subscription

You must have an active subscription to at least one of the following modules:

• Vulnerability Management

• Compliance Management

• Asset Exposure
  
  

2. Supported Operating System

Only devices running supported OS versions can be designated as scanners.

3. Credentials (Optional but Recommended)

For authenticated scans, securely configure valid admin-level credentials.

Benefits

1. Comprehensive visibility into your network and connected devices

2. Reduced manual overhead with automated, agentless scanning

3. No need for additional hardware or infrastructure

4. Strengthens compliance and overall cybersecurity posture

5. Scalable for networks of all sizes

Conclusion

The Saner CVEM Network Scanner provides a powerful, scalable, and hardware-free solution for continuous network security assessments. With its ability to perform agentless, authenticated, and automated scans, it enables organizations to identify vulnerabilities and misconfigurations across all IP-enabled devices efficiently.

For setup assistance or additional guidance, please contact the SecPod Support Team.