Installing the network agent

Network scanning runs from an agent you deploy inside the network you want to examine. This page covers downloading it, placing it correctly, and confirming it’s connected. The app includes an agent setup guide that mirrors these steps.

1. Download the agent

In the app, download the agent package for network scanning. This is the component that will execute scans locally and report results back to BestDefense.

2. Choose where to deploy it

Where you place the agent matters more than anything else. Deploy it somewhere that has:

• Network reachability to the targets — the agent must be able to reach the hosts and ports in the range you intend to scan.
• Outbound connectivity to BestDefense — the agent needs to reach the app to receive scan configurations and send results back.

A host on the same internal network as your targets, with normal outbound internet access, is usually the right place.

Caution

The agent needs both kinds of connectivity at once. If it can reach the targets but not BestDefense, it can’t pick up work or report results; if it can reach BestDefense but not the targets, scans will come back empty. Firewalls and network segmentation between the agent and either side are the most common reason scans find nothing.

3. Deploy and let it connect

Run the agent on the host you chose. Once it’s running, it connects to BestDefense and waits to pick up scan configurations. You’ll also choose the agent’s location when you set up scans, so the right agent runs the right scan.

4. Check agent status

The app shows an agent status / health view. Confirm your agent appears there and is reporting as healthy before you start a scan. If it doesn’t show up, re-check the two connectivity requirements above.

Where to go next

• Scan configurations — define what the agent should scan, then run it.