<p class="shortdesc">本章介绍如何针对目标站点下发漏洞扫描任务。</p> <section class="section prereq" id="dc_scanner_cfg_0003__prereq_c1c_1jj_jrb"><div class="tasklabel"><h2 class="doc-tairway">前提条件</h2></div> <ul class="ul" id="dc_scanner_cfg_0003__ul_cmf_bjj_jrb"> <li class="li">您已购买漏洞扫描服务。</li> <li class="li">您的登录账号需要有创建扫描任务的权限。</li> <li class="li">漏扫平台能够正常访问被扫描的资产。</li> </ul> </section> <section><div class="tasklabel"><h2 class="doc-tairway">操作步骤</h2></div><ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">登录<a class="xref" href="https://www.ocftcloud.com/" target="_blank" rel="external noopener">平安金融云官网</a>。</span> </li><li class="li step stepexpand"> <span class="ph cmd">单击页面右上角<span class="ph uicontrol">控制台</span>按钮。</span> </li><li class="li step stepexpand"> <span class="ph cmd">输入账号名和密码，通过验证，单击<span class="ph uicontrol">确定</span>，登录控制台。</span> </li><li class="li step stepexpand"> <span class="ph cmd">在左侧导航栏中单击<span class="ph menucascade"><span class="ph uicontrol">全部产品</span><abbr> > </abbr><span class="ph uicontrol">Web漏洞扫描</span></span>，进入<span class="keyword wintitle">概览</span>页面。</span> </li><li class="li step stepexpand"> <span class="ph cmd">单击<span class="ph menucascade"><span class="ph uicontrol">管理</span><abbr> > </abbr><span class="ph uicontrol">扫描任务</span></span> ，进入<span class="keyword wintitle">扫描任务</span>页面，单击<span class="ph uicontrol">下发扫描任务</span>。</span> <div class="itemgroup info"> <img class="image" id="dc_scanner_cfg_0003__image_lm3_cck_jrb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20211012140125-187925e593b6.png" width="830"> </div> <ol type="a" class="ol substeps" id="dc_scanner_cfg_0003__substeps_a12_rck_jrb"> <li class="li substep substepexpand"> <span class="ph cmd">在<span class="keyword wintitle">下发扫描任务</span>页面，单击<span class="ph uicontrol">手动添加</span>。</span> <div class="itemgroup info"> <img class="image" id="dc_scanner_cfg_0003__image_opc_xck_jrb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20211012140125-174470c39005.png" width="700"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">在<span class="keyword wintitle">手动添加</span>页面，完成如下配置信息。</span> <div class="itemgroup info"> <img class="image" id="dc_scanner_cfg_0003__image_cnz_cdk_jrb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20211012140125-1b5720c899ed.png" width="500"> <table class="table" id="dc_scanner_cfg_0003__table_kwp_fdk_jrb"><caption></caption><colgroup><col><col></colgroup><thead class="thead"> <tr class="row"> <th class="entry" id="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__1"> <p class="p">配置项</p> </th> <th class="entry" id="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__2"> <p class="p">说明</p> </th> </tr> </thead><tbody class="tbody"> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__1 "> <p class="p">目标类型</p> </td> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__2 "> <p class="p">扫描对象类型，支持主机和站点。</p> </td> </tr> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__1 "> <p class="p">主机地址</p> </td> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__2 "> <p class="p">仅支持IPv4，例如：192.168.0.1。</p> </td> </tr> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__1 "> <p class="p">主机名称</p> </td> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__2 "> <p class="p">用于标识主机。</p> </td> </tr> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__1 "> <p class="p">站点地址</p> </td> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__2 "> <p class="p">站点的URL，例如：https://example.com。</p> </td> </tr> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__1 "> <p class="p">站点名称</p> </td> <td class="entry" headers="dc_scanner_cfg_0003__table_kwp_fdk_jrb__entry__2 "> <p class="p">用于标识站点。</p> </td> </tr> </tbody></table> </div> <div class="itemgroup info"> <div class="p"> <div class="note note note_note" id="dc_scanner_cfg_0003__note_rvl_mdk_jrb"><span class="note__title">说明：</span> 需要扫描多个资产时，单击<span class="ph uicontrol">继续添加</span>可继续添加站点信息。不能继续添加时，表示扫描包次数已用完，请重新购买资源包。</div> </div> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">配置完成，单击<span class="ph uicontrol">确定</span>。</span> </li> <li class="li substep substepexpand"> <span class="ph cmd">在<span class="keyword wintitle">下发扫描任务</span>页面，单击<span class="ph uicontrol">下一步</span>。</span> <div class="itemgroup info"> <img class="image" id="dc_scanner_cfg_0003__image_fqd_wdk_jrb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20211012140125-10d5599298c6.png" width="700"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">选择扫描任务的执行时间，单击<span class="ph uicontrol">下一步</span>。</span> <div class="itemgroup info"> <img class="image" id="dc_scanner_cfg_0003__image_uqk_b2k_jrb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20211012140125-1105b20d9b95.png" width="700"> <table class="table" id="dc_scanner_cfg_0003__table_ap3_d2k_jrb"><caption></caption><colgroup><col><col></colgroup><thead class="thead"> <tr class="row"> <th class="entry" id="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__1"> <p class="p">配置项</p> </th> <th class="entry" id="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__2"> <p class="p">说明</p> </th> </tr> </thead><tbody class="tbody"> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__1 "><p class="p"></p>扫描计划</td> <td class="entry" headers="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__2 "> <p class="p">支持立即开始、定时启动和周期执行。</p> <ul class="ul" id="dc_scanner_cfg_0003__ul_bp3_d2k_jrb"> <li class="li">立即开始：配置完成后立即执行任务（仅执行一次）。</li> <li class="li">定时启动：按设置的启动时间执行任务（仅执行一次）。</li> <li class="li">周期执行：每隔一个周期执行一次扫描任务。</li> </ul> </td> </tr> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__1 "> <p class="p">允许扫描时间段</p> </td> <td class="entry" headers="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__2 "> <p class="p">允许执行扫描任务的时间段，建议选择业务不繁忙的时段，例如：00:00:00点至06:00:00点。</p> </td> </tr> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__1 "> <p class="p">启动时间</p> </td> <td class="entry" headers="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__2 "> <p class="p">定时执行扫描任务的时间。</p> </td> </tr> <tr class="row"> <td class="entry" headers="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__1 "> <p class="p">实例创建周期</p> </td> <td class="entry" headers="dc_scanner_cfg_0003__table_ap3_d2k_jrb__entry__2 "> <p class="p">包括每周任务和每月任务。</p> </td> </tr> </tbody></table> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">选择扫描类型。当<span class="ph uicontrol">扫描目标类型</span>为<span class="ph uicontrol">主机</span>时，<span class="ph uicontrol">主机漏洞扫描</span>默认开启且不能关闭。</span> <div class="itemgroup info"> <img class="image" id="dc_scanner_cfg_0003__image_shx_j2k_jrb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20211012140125-13d5e0f19ed9.png" width="700"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">扫描任务下发成功后，单击<span class="ph uicontrol">关闭</span>。</span> <div class="itemgroup info"> <img class="image" id="dc_scanner_cfg_0003__image_kjd_m2k_jrb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20211012140125-18da4b61902d.png" width="700"> </div> </li> </ol> </li></ol></section> <section class="section result" id="dc_scanner_cfg_0003__result_ezz_n2k_jrb"><div class="tasklabel"><h2 class="doc-tairway">执行结果</h2></div> <p class="p">任务下发后，在<span class="keyword wintitle">扫描任务</span>页面，可以看到刚添加的扫描任务的<span class="ph uicontrol">扫描结果</span>为<span class="ph uicontrol">未开始</span>或<span class="ph uicontrol">扫描中</span>，则表示任务下发成功。</p> <div class="p"> <div class="note note note_note" id="dc_scanner_cfg_0003__note_gch_s2k_jrb"><span class="note__title">说明：</span> 下发任务时如果选择<span class="ph uicontrol">定时执行</span>或<span class="ph uicontrol">周期执行</span>，且任务下发后未到设定的执行时间，<span class="ph uicontrol">扫描结果</span>显示为<span class="ph uicontrol">未开始</span>；如果选择<span class="ph uicontrol">立即执行</span>，<span class="ph uicontrol">扫描结果</span>则显示为<span class="ph uicontrol">扫描中</span>。</div> </div> </section>