Tenable.io Scan Routing

With scan routing, you can automatically dispatch scanning across multiple scanner groups according to the areas of your network that each group is configured to access. Scan routing reduces scan configuration and management overhead by eliminating the need to configure specific scanners for each individual scan. This feature can represent a significant benefit in large deployments. In addition, you can improve operational efficiency by tasking higher-privilege team members with managing scanner pools, which lower-privilege team members can then use in scan configuration.

Scan routing is available for linked scanners only.

If you configure scan routing for a scan, when the scan runs, Tenable.io automatically does the following:

Assigns the scan targets to the scanner group configured with the narrowest matching target range.
Within that scanner group, assigns targets to scanners as they check in, according to their capacity and the targets still available.

Endpoint	Description	Change
GET /scanner-groups/{group_id}/routes	List scan routes.	new
PUT /scanner-groups/{group_id}/routes	Update scan routes.	new
POST /scans	Create a scan.	new `AUTO-ROUTED` value for `scanners` request parameter; new `target_network_id` request parameter
PUT /scans/{scan_id}	Edit a scan.	new `AUTO-ROUTED` value for `scanners` request parameter; new `target_network_id` request parameter
POST /scans/check-auto-targets	Test scan routes.	new

For more information, see Manage Scan Routing.