Internal Agents in Invicti Enterprise

Some organizations may have websites that are only accessible within their local network (and not on the internet). In these cases, our Internal Agent feature allows you to scan your internal targets while the results remain on our Invicti Enterprise servers. The Internal Agents feature is available in both Invicti Enterprise On-Demand and On-Premises. You can install an internal agent on Windows, Linux, Docker, Kubernetes, and OpenShift.

This document provides information about the requirements for internal agents to operate effectively, and how to configure an internal agent for a target and then scan an internal target using a scan agent.

Allowlisting Invicti's IP addresses for effective communication

The Invicti Enterprise web application and internal agents use certain IP addresses to communicate with one another. For effective operation, you need to allowlist those IP addresses on your firewall and/or proxy servers. Without establishing this communication, you may run into problems, such as:

• The scanner agent may not report all of its findings to the Invicti Enterprise web application.
• Invicti Enterprise may not push the vulnerabilities to the on-premises integration endpoints, such as Jira.

Allowlisting Requirements

• www.invicti.com
• r87.me
• Allowlist the following addresses according to your region:

How to configure an internal agent for a website

After installing the internal agent on your network, you should specify a target to scan with the internal agent.

1. Select Targets > New Target from the left-side menu.
2. Complete the fields, as described in Adding a target.
3. In the Agent Mode field, select Internal.
4. Click Save.

How to scan an internal website

After installing an agent and determining which target will be scanned with the internal agent, you can start a scan on your internal website.

1. Select Scans > New Scan from the left-side menu.
2. In the Target URL field, enter the URL of the internal website.
3. From the Preferred Agent drop-down, select an internal agent to use during the scan. Alternatively, you can retain the default setting (Any of the available agents), so that Invicti Enterprise will automatically select an internal agent to use.

4. Complete the remaining fields, and select Launch.

Managing Agents

Select Agents > Manage Agents to view a list of all internal agents you have set up. The table below explains the information displayed on the Agents page.