Internal network scans allow users to scan network ports to detect, observe, and manage TLS certificates by a chosen IPv4 address or range. For the internal scan to successfully run, you need to create an agent, which is a lightweight network utility that will monitor your internal network and send the results to Atlas Discovery.

Agents are available for Windows, Linux, and Darwin (macOS). The Windows agent is codesigned with a GlobalSign Codesigning Certificate.

1. Log in to your Atlas↗ account.
2. Click Discover dropdown to expand.
   
   
3. Select Scan Profiles from the list.
   
   
4. Click Create a Scan Profile.
   
   
5. Enter a name for the profile.
   
   
6. Select Agent as the scan type.
   
   
7. Enter the domain name or a public IPv4 address or range and set the port that you want to scan. NOTE: The default is port 443. You can only enter one port per target. You can also tick the checkbox and include subdomains of this domain if you wish.
   
   
   1. Click Add another target if you wish add another target in the same profile.
      
      
8. Click Save Profile. The page expands to show additional instructions.
   
   
9. Choose your operating system. NOTE: In this example, Windows is selected.
   
   
10.  Click Download agent for Windows.
    
    
11.  Open a command line in the directory where the agent was installed. 
12.  Copy the provided token from Atlas Discovery and paste it into the command line to activate the agent. The agent is defaulted to run every 24 hours, but you can adjust this by modifying the “-frequency” parameter. You can also add the “-verbose” parameter, which will display polling information from the agent.
13.  Close the scan configuration window in Atlas Discovery.

For Linux and Darwin implementations, change the agent's executable permissions using the command chmod a+x.

To run the agent for Darwin implementations,

1. On the security pop-up, click Cancel.
2. Go to the System Preferences > Security & Privacy > General tab. Click “Allow Anyway” where it says that the app was blocked.
3. Run the agent again, and on the next pop-up, click Open.
    

The activation token is good for one year. If you lose it and need to reactivate the agent, you can get a new token by clicking the “Reset Token” button in the scan configuration screen.