I am just wonder if I have a mirror/identical (high availability server) server in my CDE segment, is that mirror server need be in scanning scope?

If it is not in the scope, in the scanning report do I need to have a special note or remark on that particular server to show that it is a mirror server of XX server.

  • I don't know the answer, but why would you think it isn't equally in scope?
    – Bobson
    Sep 13 '17 at 11:13
  • I am just thinking to cut cost, if it is the identical server maybe we can ignore the scanning for this mirror server (secondary server) and just proceed to scan only the primary server. Not sure it is doable.
    – overshadow
    Sep 13 '17 at 18:45

Yes, the mirror server must be scanned and listed separately in your asset inventory. Identical in technology is never truly identical. All you need is to miss one patch or miss one configuration item on one of the servers.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.