What do the numbers mean in the scan summary box?

To make sense of the numbers, it helps to remember that runZero doesn't just rely on IP addresses. Instead, it fingerprints the asset devices based on how they respond to probes, and tries to catch situations where the same device changes IP address.

"Newly discovered assets" are systems that were found during this scan, that Rumble had never seen anything matching their fingerprint before, so they're assumed to be new devices.

"Assets marked offline" are systems that were in runZero’s database as known to exist on the scanned network, but they didn't respond on any of the IP addresses scanned. When this happens, they are marked offline, but this is just a flag on the asset. It doesn't count as a change to the asset, it just means runZero didn't see it. It could be because the device was powered down, because it was disconnected, or it could even be a network problem.

"Assets back online" is the opposite -- systems that were marked offline some time in the past, but now we've seen them again.

"Assets changed" is the number of assets where some property of the asset was modified. Perhaps it responded on a new TCP port because a new service had been installed, or one of its IP addresses changed, or its name changed.

"Assets unchanged" is the number of assets that were seen exactly where we expected to find them, with no changes to their responses.

"Assets ignored" is the number of assets where we got a response, but it turned out to be bogus in some way. This tends to happen when you have things like web proxies, stateful firewalls and SIP gateways that respond as if they were at every address on a subnet.

"Assets updated by task" is the sum total of "Assets changed" plus "Assets unchanged". What it really means is the number of asset records that are now up to date.