ENTERPRISE

Managing scanning pools

  • Last updated: May 17, 2022

  • Read time: 2 Minutes

Scanning pools are useful if you have a need to limit which scanning machines can scan certain sites. You may wish to keep scanning machines and the sites they scan to the same geographic areas, for example, or some sites might only be available to scan by machines on the same network. Scanning pools stop the problem of a scan failing because the relevant machine is busy elsewhere, or an assigned machine being unable to access a restricted site for a scan. Some example uses for scanning pools are:

  • Keeping the scanning machines and sites for one geographic area together.
  • Cordoning off the resources of one team.
  • Scanning sites with restricted access.
  • Reserving scanning machines for specific purposes, such as a CI/CD pipeline or ad-hoc scanning.

Note

Scanning pools are only available on standard deployments of Burp Suite Enterprise Edition, as Kubernetes deployments are designed to scale scanning resources automatically and do not use "fixed" scanning machines.

Features of scanning pools

Each scanning machine and site is assigned to a pool. The important features of scanning pools are:

  • Each scanning machine must belong to a scanning pool.
  • Each site to be scanned must belong to a scanning pool.
  • Only scanning machines in the same pool as a site can scan that site.

Manage scanning pools

To manage scanning pools, click on the settings cog icon at the top right of the screen and select Scanning machine settings. Then, select the Scanning pools tab.

Create a new scanning pool

To create a new scanning pool, do the following:

  1. Click on the settings cog icon at the top right of the screen and select "Scanning machine settings".
  2. Click on the Scanning pools tab.
  3. Select Create pool.
  4. Provide a name and description for the new scanning pool.
  5. Assign the relevant scanning machines and sites to the new pool.
  6. Click Save.

Reassign a scanning machine to a different pool

To reassign an existing scanning machine to a different pool, do the following:

  1. Click on the settings cog icon at the top right of the screen, and select Scanning machine settings.
  2. Make sure you are on the Scanning machines tab.
  3. In the list of scanning machines, select the relevant drop-down menu for the scanning machine you want to reassign, and click on the name of the scanning pool to place it in that pool.

Reassign a site to a different pool

To reassign an existing site to a different scanning pool, do the following:

  1. Click on the Sites tab.
  2. Select the relevant site.
  3. Click on the Details tab.
  4. Click Edit.
  5. Click on the Scanning pool drop-down and select the scanning machine pool you want the site to move to.
  6. Click Save.