Scanner Groups

Scanner groups organize multiple scanners for multi-vantage-point scanning. When a scan targets a scanner group, separate jobs are created for each scanner in the group, allowing the same targets to be probed from different network locations. Built-in groups cannot be modified or deleted. Groups used in scan templates are protected from deletion.

Inputs

Name Description Allowed Values Default
Name Unique label for this group Non-empty string, must be unique across scanner groups
Description Optional free-text note about this group Any text, max 10,000 characters Empty
Scanners Which scanners belong to this group One or more existing scanners None selected

Fields & Columns

Name Description
Name Editable inline (non-built-in) — the group label. Links to the edit form.
Description Editable inline (non-built-in) — optional note
Scanners Count of scanners currently in this group
Built-in Whether this group ships with mipo and is read-only

Gotchas

  1. Scanner groups are NOT load balancers — every scanner in the group scans the same targets independently for vantage-point comparison.
  2. Groups referenced by a scan template cannot be deleted — remove the template reference first.
  3. When a subnet has a rate limit, it is divided equally among scanners in the group targeting that subnet. Example: subnet rate 600 pps with 3 scanners → each scanner limited to 200 pps for that subnet.

API Calls (6)

Method Path Description
GET /api/config/scanner-groups List all scanner groups
POST /api/config/scanner-groups Create a new scanner group
PUT /api/config/scanner-groups/:id Update an existing scanner group
DELETE /api/config/scanner-groups/:id Delete a scanner group (if unreferenced)
GET /api/config/scanner-groups/:id/details Get scanner group details with members
GET /api/config/scanner-groups/filter-values Get available filter values for the scanner groups table

Related Pages

  • Scanners — Individual scanners that are organized into groups
  • Scan Templates — Consume scanner groups to define which scanners run the scan
  • Scanner ACL — Grouped scanners share ACL entries for firewall configuration