Cortex xdr agent distributed network scan

[Vinothkumar_SBA]

Hi Team,

We have enabled the Cortex XDR agent's distributed network scan, and we are getting successful results in the XDR Management Console. Our question is: Which port is used by the XDR agent to identify unmanaged assets

[aspatil]

Hello @Vinothkumar_SBA ,

If you are using Nmap, in the first stage, Nmap performs a ping scan -PS -PA which by default will try to use port 80 but will try to use other ports if not available.
Its has no limits about the port numbers in use.
If the request is also for os detection it may scan also a large number of ports depending on the OS which is also not limited to specific port numbers.

If you feel this has answered your query, please let us know by clicking like and  on "mark this as a Solution". Thank you.