Ports

By default, Application Scanning scans ports 80 and 443. The port settings are under Scan preferences > What should we scan? in the scan profile settings.

Ports to Scan

The ports the scan sends requests to. The default is 80 and 443. If your web application runs on another port, add it here.

You don’t need to keep 80 or 443 in the list. For example, an application on port 8080 scans correctly with only 8080 in the list and Attempt scanning of common ports off.

The scan needs at least one port to send requests to, so either list a port here or turn on Attempt scanning of common ports.

Disallowed Ports

Ports the scan must not send any requests to.

To stop scanning ports 80 and 443, remove them from Ports to scan, add them to Disallowed ports, and leave Attempt scanning of common ports off.

Attempt Scanning of Common Ports

This setting is off by default for scan profiles created after May 1, 2023. When it’s on, the scan checks a short list of common ports at the beginning of the scan. The list includes standard ports such as 80, 443, 8080 and 8081, and ports used by specific technologies, such as 3000, 5432 and 7001. A port that replies with a valid HTTP response is included in the scan.

Some firewalls and WAFs consider port scanning intrusive and block the scanner. We recommend leaving this setting off and listing your ports in Ports to scan instead.

Check Which Ports Were Scanned

The Discovered Hosts finding in the scan results shows which ports were assessed.

Next Steps

• Troubleshooting — Fix “Unable to find open ports on the endpoint”
• Settings — All scan profile settings