SecurityInsight settings · Settings > Collection scope & limits
Public IP discovery source
| Key | SI_PublicIP_DiscoverySource |
|---|---|
| Where | Settings > Collection scope & limits > Public IP checks (Shodan) |
| Type | enum |
| Default | profile-cl: public IPs of already classified servers, plus your extra targets. |
| Edition | Community |
What it does
Chooses where the engine finds public IP addresses to check: classified assets (profile-cl), Azure and Defender inventory (arg-eg), or both (union).
When set
arg-eg covers every Azure public IP and Defender node but without tier or CMDB context; union checks everything. Broader modes mean more addresses, longer runs and more Shodan lookups. Unknown values fall back to profile-cl.
When blank or default
Left blank, the default applies: profile-cl: public IPs of already classified servers, plus your extra targets.
Risk and how to reverse it
Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.
Requires
Read by: publicip.
Recommended
Keep the default. Change it when: When you want Azure public IPs that are not attached to a classified asset to be checked too.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack