Check Scanner IP Addresses

It is your responsibility to confirm that the PCI network scan of your entire in-scope infrastructure can be performed without interference from intrusion detection systems (IDSs) and intrusion prevention systems (IPSs). This is per the PCI Council's Program Guide.

Only IPs that are accessible from the Internet are scanned by the service. The service automatically provides multiple scanners for external (perimeter) scanning, located at the Security Operations Center (SOC) that is hosting the PCI compliance service. Depending on your network, it may be necessary to add the scanner IPs to your list of trusted IPs, so the service can send probes to your in-scope system components.