Identical assets in inventory

View as Markdown

Why are there so many identical assets in my inventory?

Identical assets pile up in your inventory when a network appliance replies to every connection attempt the scan makes. If you can’t stop the device from replying to all connections, you have two workarounds:

  • Exclude the ports the device responds to from the scan configuration.
  • Exclude all or part of the router’s IP address range from the scan.

Some enterprise routers and firewalls, like Cisco ASA devices, reply to every unexpected attempt on a particular port with a TCP reset (RST). Some routers also listen for SIP traffic on all addresses and answer it automatically. runZero tries to detect and skip most SIP helper implementations, but can’t always do so without risking real results.

runZero generally detects when a router or firewall is replying to every connection attempt and avoids creating assets from those responses. When it misses an appliance that is spoofing responses, a large number of identical assets can appear in your inventory.

If you need help deleting the unwanted records, contact runZero support.

Updated