If BMC Helix Discovery pings an IP address where there is no device and some firewall in your environment is configured to respond for that IP address, it may result in reporting a device which does not exist on the network rather than dark space (NoResponse). To scan networks that do not permit ICMP ping packets, you may set Use TCP ACK ping before scanning or Use TCP SYN ping before scanning (or both of these) in your discovery settings to Yes. For more information, see Configuring discovery settings. If there is a limited range if IPs for which ICMP Echo is suppressed, you can disable the ping behavior for these IPs by using the Exclude ranges from ping. You must alter the 'Ping hosts before scanning' setting to 'No' in this situation. This is because the system performs a full 'Access Method' nmap port scan to determine whether the host is actually present, which causes delays as it waits for requests to timeout. If you do not allow ICMP pings through the firewall and do not enable TCP Ack and Syn pings, you might lose performance. On the Scanning section, enable the Use TCP ACK 'ping' before scanning and Use TCP SYN 'ping' before scanning check boxes, and enter the port numbers in the TCP ports to use for initial scan and UDP ports to use for initial scan fields. To do so, on the Administration tab, scroll down to the Discovery section and click Discovery Configuration. It is possible to use other ping techniques if ICMP Echo is suppressed in your environment.

This section describes communication between the BMC Helix Discovery Outpost and discovery targets.įor efficiency, the BMC Helix Discovery Outpost uses ICMP ping to locate a device.

Windows 10 firewall allow ping