View source IP addresses for Attack Surface Testing scans

Locate Attack Surface Testing scan source IPs and apply recommended allow-list guidance.

To view the IP address range Cortex Xpanse uses for vulnerability tests, navigate to Settings → Configurations → Vulnerability Testing and refer to the Source IP Addresses section. We recommend adding this range to your organization's security tooling allow lists to avoid unnecessary alerting; however, we do not recommend modifying the configuration of your perimeter security controls to allow this traffic to pass. The aim of Attack Surface Testing is to confirm the exploitability of vulnerabilities from an attacker perspective.