Manage scans - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-04
Category
Administrator Guide

The Scan Management page lists all your configured scans along with important information about each scan, including scan progress. From this page you can perform most scan management operations.

  1. Navigate to SettingsConfigurationsNetwork ScannersScan Management.

  2. Right-click on a scan in the list to perform the following actions:

    Action

    Description

    Launch Scan

    Start the scan.

    Note that scheduled scans start automatically. Manually launching a scan will run it without quiet hour restrictions and will cause it to skip any scheduled scan, if the runtimes overlap.

    Edit Scan

    Modify the scan settings.

    Cancel Scan

    Cancel an actively running scan. Changes the Scan Progress field to Canceling and then Canceled.

    Pause Scan

    Pause an actively running scan. Changes the Scan Progress field to Pausing and then Paused.

    Resume Scan

    Resume a paused scan.

    View Rescan History

    View a list of all completed rescans to assess the effectiveness of remediation efforts. You can also download a CSV report scan results here.

    Delete Scan

    Remove scan from scan list.

  3. (Optional) Click on a scan to display the scan history, including the status of every historical scan, whether a scan is currently running and the progress, scan duration, and the number of dead, alive, and completed hosts.