When Abnormally terminated scanning plan occurred, a "Scan failure" alert appears in the upper right of the Vex screen.
Open the Vex Scan tab > "Abnormally terminated scanning plan" tab in the left pane to show a list in which you can see which Message IDs and signatures have the error.
Try the following, when Abnormally terminated scanning plan occurred,
-Perform Test Access
Perform Test Access to the Message ID where Abnormally terminated scanning plan occurred.
If it fails, check the server status.
Perform Test Access to the Message ID where Abnormally terminated scanning plan occurred.
If it fails, check the server status.
-Perform "Re-register" and scan again
Click "Re-register" in Abnormality terminated scanning plan to re-register the Message ID which was abnormally terminated in the scanning plan, and scan again.
-See "Reason for abnormality" if re-scanning is also abnormally terminated.
When "Reason of abnormality" includes the description other than the following 1-4, use a proxy tool other than Vex and send the same signature as the one used for the abnormally terminated one in order to make sure you get response.
1. No response from the scanning target host
2. An empty response was returned
3. Connection has been reset
4. Access exclusion object
In case of the above 1-4, or no response returned, you can determine that it was caused by the behavior of the target server or the WAF. (Re-scanning is not necessary if it is a proper behavior which was controlled as intended by the server side).
Comments
0 comments
Please sign in to leave a comment.