Using FlexChecks

The FlexChecks™ feature lets you create, edit, or delete custom user-defined checks or FlexChecks that scan specific network environments for vulnerabilities or conditions not currently scanned by Internet Scanner. To run a FlexCheck, you must develop an executable written in the C language or written as a Perl script.

Dialog Box Elements

Element

Description

Check Name

The user-defined name for the FlexCheck you create.

Executable

The executable (.exe) file for the FlexCheck you create.

Add

Lets you add or create a FlexCheck, which displays as an entry in the FlexChecks folder on the Policy Editor folder tree.

Check Name: The user-defined name for the FlexCheck you create.

Executable: The executable (.exe) file for the FlexCheck you create.

Arguments: The command-line arguments passed to the executable file during a scan. Before launching the executable for the host, Internet Scanner appends the IP address for each scanned host to the argument.

Timeout (secs): The number of seconds that each instance of the executable is allowed to run.

Info: Lets you type details about your custom check, including a description of the vulnerability and its fix information.

Edit

Lets you modify a FlexCheck.

Delete

Lets you remove a FlexCheck from Internet Scanner.

Internet Scanner provides CustomTest.exe designed to test the functionality of the FlexCheck engine. The Custom Test check does not rely on scanning a host to function, and uses the following arguments to vary scan results: pos, neg, fail, and timeout. See Running the Custom Test check from the Command Line or Running the Custom Test check from the User Interface.

Important: ISS does not support the functionality of the FlexChecks you create, but we do provide technical support for the FlexCheck engine that runs your FlexCheck. If your FlexCheck does not run, and you suspect that the FlexCheck engine is the cause, please use the Custom Test check included with Internet Scanner to test your FlexCheck engine. See Running the Custom Test check from the Command Line or Running the Custom Test check from the User Interface.

If the FlexCheck engine does not work after using the Custom Test check, please e-mail support@iss.net for assistance.

Related Topics

Element	Description
Check Name	The user-defined name for the FlexCheck you create.
Executable	The executable (.exe) file for the FlexCheck you create.
Add	Lets you add or create a FlexCheck, which displays as an entry in the FlexChecks folder on the Policy Editor folder tree. Check Name: The user-defined name for the FlexCheck you create. Executable: The executable (.exe) file for the FlexCheck you create. Arguments: The command-line arguments passed to the executable file during a scan. Before launching the executable for the host, Internet Scanner appends the IP address for each scanned host to the argument. Timeout (secs): The number of seconds that each instance of the executable is allowed to run. Info: Lets you type details about your custom check, including a description of the vulnerability and its fix information.
Edit	Lets you modify a FlexCheck.
Delete	Lets you remove a FlexCheck from Internet Scanner.