How to stop a scan or manual penetration test?

Details for what to do if you have to pause or stop an ongoing scan

Version Number: v1.0.1

Published Date: 14 May 2024

____________________________________________________________________________

Our office in Dublin is open for support queries between the hours of 0800-2200 Dublin Time, and we can be contacted by raising a ticket or by phone on 00 353 1 684 5330. By calling in, we may also ask you to follow up with an email/ticket to verify your identity.

For out of hours escalations due to our scans significantly impacting performance to an application or server that requires a stop to the scan, please follow the steps below. If there is no performance issue, please raise a ticket and we will action this ASAP on the next business day.

1. Is the traffic coming from edgescan?
   Check that the traffic causing the issue is in fact coming from Edgescan by checking the source address is in the list of our source IPs. If not, stopping scanning may have no effect.

2. Is the asset currently undergoing an assessment?
   Check that the asset in question currently has an assessment in progress by going to the asset in the assets page and viewing the scanning pane. No assessment indicates that traffic is not currently originating from one of our scans.

   1. Assessment in Progress:

   2. Assessment not in Progress:

3. Is automated scanning taking place?
   If an automated scan is in progress, you may have the ability to pause the assessment (or the super user in your organization will have the ability). Click the Pause assessment button and all scanning will pause.
   
   

   1. Automated Scan in Progress:

   2. Automated Scan not in Progress:

4. Does all of the above indicate that Manual Scanning is coming from an edgescan IP?
   If there is a manual scan which is affecting your system, please follow the escalation path that has been communicated to you during onboarding.