Disable Port Scanning

[zinger3031]

Is it possible to disable certain port scans within LanSweeper?  Like for an example, in our environment we don't need LanSweeper scanning port 23 on our assets. 

ICMP Ping

Port: 21/TCP (FTP)

Port: 22/TCP (SSH) or a custom SSH port of your choice

Port: 23/TCP (Telnet)

Port: 25/TCP (SMTP)

Port: 80/TCP (HTTP)

Port: 135/TCP (EPMAP)

Port: 137/UDP (NetBIOS Name Service)

Port: 139/TCP (NetBIOS Session Service)

Port: 161 (SNMP)

Port: 443/TCP (HTTPS)

Port: 445/TCP (SMB)

Port: 1400/TCP (Sonos devices HTTP)

Port: 1900/TCP (SSDP, UPnP)

Port: 1900/UDP (SSDP, UPnP)

Port: 5060 (SIP) or a custom SIP port of your choice

Port: 5353/TCP (mDNS, DNS-SD)

Port: 5353/UDP (mDNS, Bonjour, DNS-SD)

Port: 5986/TCP (WinRM HTTPS for Windows cluster log scanning and Hyper-V log scanning)

Port: 8008/TCP (Chromecast)

Port: 8080/TCP (HTTP)

Port: 8443/TCP (HTTPS)

Port: 9100/TCP (JetDirect)

Port: 16992/TCP (Intel vPro HTTP)

Port: 16993/TCP (Intel vPro HTTPS)

Port: 62078/TCP (iTunes sync port for iOS device identification)

[zinger3031]

If we block certain ports on the firewall from being scanned, will that cause the scan to fail???

[Obi_1_Cinobi]

Hello there!

As Lansweeper uses these ports to determine the asset type, blocking ports could indeed lead to behavior where Lansweeper cannot correctly identify the asset type and will not be able to collect more information on the asset in question.

[Obi_1_Cinobi]

Hello there!

Unfortunately, this cannot be switched off as it is an essential part of our scanning method. When Lansweeper scans an asset, it will test certain ports to determine the asset type.

You can find an overview of the ports Lansweeper uses in the KB article linked below. As mentioned in the guide, Lansweeper uses different ports for different asset types.

https://www.lansweeper.com/knowledgebase/used-tcp-ports/