I am thinking about a solution to scan Vlans directly an not through the vlan and running minimal Services on the QRadar that connects the sensitive Vlans. The Idea is to build 2 nodes: an AIO Applaiance and a scanner.
See the following drawing:
Does anybody know if this is a recommended soulution? How much can the resources on the AIO be reduced when the workload of scanning is no longer done on the AIO?
------------------------------
Martin Schmitt
------------------------------