F-Secure Radar Discovery Scan ping detection fails due to switch redirection. - WithSecure Community
<main>
<article class="userContent">
<h3 data-version="6" data-article="000012266">Issue:</h3>
<p>Ping detection fails due to switch redirection using RADAR Discovery Scan.</p>
<h3>Resolution:</h3>
<p>We have added a new feature In F-Secure Radar that helps to resolve this issue. You need to modify your discovering scan template to use it. Follow the steps below to configure the top 100 port scan template without scanning or pinging port 80:<br></p><ol><li>Create a new discovery scan template:</li></ol><ul><li><b>Name </b>the template (eg. "Port Scan (no 80 ping)")</li><li>For scan mode select <b>Custom port scan</b></li><li><b>TCP range:</b> 7,9,13,21-23,25-26,37,53,79,81,88,106,110-111,113,119,135,139,143-144,179,199,389,427,443-445,465,513-515,543-544,548,554,587,631,646,873,990,993,995,1025-1029,1110,1433,1720,1723,1755,1900,2000-2001,2049,2121,2717,3000,3128,3306,3389,3986,4899,5000,5009,5051,5060,5101,5190,5357,5432,5631,5666,5800,5900,6000-6001,6646,7070,8000,8008-8009,8080-8081,8443,8888,9100,9999-10000,32768,49152-49157</li><li><b>UDP range:</b> 7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024 </li><li>Click <b>Save</b></li></ul><ol start="2"><li><b>Download </b>the new template:</li></ol><ul><li>Select it on the templates list (click the checkbox)</li><li>Click <b>Download scan settings</b></li><li>Edit downloaded file by adding '-PE -PP -PS443' node within '' (see Top 100 no 80 ping.xml)</li></ul><ol start="3"><li><b>Upload </b>modified template:</li></ol><ul><li>Click <b>Upload scan settings</b> on Radar templates list</li><li>Browse for your edited file and click "Upload"</li></ul><ol start="4"><li>Use your newly created template in Discovery Scans.</li></ol><b>Note:</b> If you want to skip port 80 pings on other types of scans, the procedure is similar (add correct <AdditionalNmapOptions> in the config).
<p>Article no: 000012266</p>
</article>
</main>