Some key advantages of active scanning:

Highly scalable because scanning takes place from a central location or distributed locations of the security architect’s choice and does not require software installation on the targets.

• The technology can provide a hacker’s view of the network and targets, so the vulnerability manager can have a realistic view of their risks in the production environment.

• Potential to support any networked device, that is, not limited to a compatible platform for an agent.

• Can provide incremental information regardless of platform support (e.g., open ports, identified protocols/applications, banners) even when the vulnerability management system has not previously seen the device.

Disadvantages:

If the target is not connected to the network, it will not be scanned. Agents can detect a vulnerability when it occurs and report the results the next time the host is connected to the network.

• A potential exists for impact on the network infrastructure since all scanning is so performed. However, some basic planning will prevent such adverse effects.

• Scanning is slower over slow network connections. This is typical in small offices with weak links. Today, we see this frequently in South America, Africa, and some parts of Asia.