ForeNova Official Site

NovaGuard

Endpoint Detection and Response

NovaGuard protects endpoints with threat detection, investigation and response, including malware containment and endpoint management.

NovaGuard  ›  Product Documentation  ›  NovaGuard 6.04R4 User Manual  ›  4.2.1.6 Suspicious Scans

4.2.1.6 Suspicious Scans

EnglishUpdated on: 2025-07-28Read permission: PublicVersion: 6.04R4

The NovaGuard agent can actively and passively detect the port scanning activity. The agent-installed endpoint can actively detect the port-scanning activity and detect the port-scanning activity from other endpoints toward the agent-installed endpoint.

Suspicious scans will be reported automatically once detected without requiring manual configuration.

4.2.1.6 Suspicious Scans illustration

Click View Details to view the details of a suspicious scan event, including the source IP address, target endpoint and port, time when the scan was detected, number of occurrences, and recommendations.

4.2.1.6 Suspicious Scans illustration

Click Fix to fix the compromised endpoint.

4.2.1.6 Suspicious Scans illustration

Click Go to Response . You will be redirected to the Detection and Response Response page to view event logs.

4.2.1.6 Suspicious Scans illustration
NovaGuard 6.04R4 Manual.pdfPDF · English · 24.1 MB
Download