network based vulnerability scans

non-credential based network scans credential based network scans

This type of scan can be drastically affected by either being internal or external. PCI DSS requires internal scans, and requires that these scans be supplemented by external scans conducted by an Approved Scanning Vendor (ASV)

Some security controls that may affect network scans are:

• firewalls
• network segmentation
• Intrusion Prevention Systems (IPS)
• Intrusion Detection Systems (IDS)