Scheduling#

The scheduling feature allows you to run scans at specific times and view projected future scan activity across your puck deployment.

Scheduling Scans#

You can schedule one-off scans to run at a specific time. This is useful for testing during maintenance windows, after network changes, or at times that won't impact production workloads.

Creating a Scheduled Scan#

To schedule a scan:

1. Navigate to the Calendar View on your dashboard
2. Click on the day you want to schedule a scan
3. Click the "Schedule Event" button
4. Configure your scan options:
   • Source Puck: Select which puck will perform the scan
   • Scan Type: Choose the type of scan to run
   • Run Time: Set the specific time for the scan to execute

Scan Types#

When scheduling a scan, you can choose from the following scan types:

• TCP Scan (External): Tests outbound TCP connectivity to external destinations. Identifies potential egress paths through your firewall.

• UDP Scan (External): Tests outbound UDP connectivity to external destinations. Useful for identifying DNS tunneling or other UDP-based exfiltration paths.

• HTTP Scan (External): Tests web-based outbound connectivity. Verifies if HTTP/HTTPS traffic can reach external destinations.

• Internal Puck Scan: Tests network segmentation by attempting to connect between deployed pucks. This simulates lateral movement and helps validate that network boundaries are enforced correctly. See Network Segmentation Testing for more details.

Understanding Projected Events#

Projected events show future scan occurrences based on each puck's configured test period. These help you anticipate upcoming scan activity without requiring manual scheduling.

What Are Projected Events?#

Each puck has a configurable test period that determines how frequently it runs automatic scans. Projected events are calculated future occurrences of these automatic scans, displayed on the calendar to give you visibility into upcoming activity.

How Projected Events Appear#

In the Calendar View, projected events are displayed with:

• Dashed border: Distinguishes them from completed or scheduled events
• Grouped by puck: Multiple projected scans from the same puck are grouped together for easier reading

Relationship to Test Period#

The frequency of projected events depends on each puck's test period configuration:

• A puck configured to run daily will show one projected event per day
• A puck configured to run weekly will show one projected event per week
• You can modify the test period in the Puck Configuration settings

Projected events automatically update when you change a puck's test period configuration.

Viewing Scan Results#

After a scheduled or automatic scan completes, you can view the results directly from the calendar.

Accessing Results#

1. Click on a day in the Calendar View
2. Completed scans show a count badge indicating how many scans finished
3. Click on any completed scan to open the summary modal

Summary Modal#

The summary modal displays:

• Pass/Fail Statistics: Quick overview of scan results
• Scan Details: Information about what was tested
• Link to Full Report: Click through to the Report Details page for comprehensive results

Event Status Indicators#

The calendar uses visual indicators to show event status at a glance: