A system comprising: at least one scan server within an enterprise network; a plurality of local link segments within the enterprise network; a plurality of agents within the enterprise network, each agent (114A,114B) of the plurality of agents being coupled to a corresponding local link segment (110A,110B) of the plurality of local link segments; a plurality of routers, each router (112A,112B) coupled to its corresponding local link segment (110A,110B) to place the at least one scan server in communication with the corresponding agent (114A,114B) coupled to the local link segment (110A,110B); wherein at least one selected agent (114A,114B) of the plurality of agents, in response to the scan server issuing a command to the at least one selected agent to discover at least one network node coupled to the corresponding local link segment (110A,110B), is configured to: issue at least one second command to the corresponding local link segment (110A,110B), to receive in response to the second command at least one message from one or more network nodes on the corresponding local link segment; maintain one or more responses from the one or more network nodes on the corresponding local link segment within a predetermined time window after sending the second command, the predetermined time window being adjustable to compensate for noisiness and latency of the local link segment; obtain from the one or more responses a link-local address corresponding to a network node of the one or more network nodes, the link-local address being valid only within the corresponding local link segment; convert the link-local address into a routable site-local address, the routable site-local address being valid within the enterprise network and invalid on a public network; and provide the routable site-local address to the at least one scan server. at least one scan server within an enterprise network; a plurality of local link segments within the enterprise network; a plurality of agents within the enterprise network, each agent (114A,114B) of the plurality of agents being coupled to a corresponding local link segment (110A,110B) of the plurality of local link segments; a plurality of routers, each router (112A,112B) coupled to its corresponding local link segment (110A,110B) to place the at least one scan server in communication with the corresponding agent (114A,114B) coupled to the local link segment (110A,110B); wherein at least one selected agent (114A,114B) of the plurality of agents, in response to the scan server issuing a command to the at least one selected agent to discover at least one network node coupled to the corresponding local link segment (110A,110B), is configured to: issue at least one second command to the corresponding local link segment (110A,110B), to receive in response to the second command at least one message from one or more network nodes on the corresponding local link segment; maintain one or more responses from the one or more network nodes on the corresponding local link segment within a predetermined time window after sending the second command, the predetermined time window being adjustable to compensate for noisiness and latency of the local link segment; obtain from the one or more responses a link-local address corresponding to a network node of the one or more network nodes, the link-local address being valid only within the corresponding local link segment; convert the link-local address into a routable site-local address, the routable site-local address being valid within the enterprise network and invalid on a public network; and provide the routable site-local address to the at least one scan server. issue at least one second command to the corresponding local link segment (110A,110B), to receive in response to the second command at least one message from one or more network nodes on the corresponding local link segment; maintain one or more responses from the one or more network nodes on the corresponding local link segment within a predetermined time window after sending the second command, the predetermined time window being adjustable to compensate for noisiness and latency of the local link segment; obtain from the one or more responses a link-local address corresponding to a network node of the one or more network nodes, the link-local address being valid only within the corresponding local link segment; convert the link-local address into a routable site-local address, the routable site-local address being valid within the enterprise network and invalid on a public network; and provide the routable site-local address to the at least one scan server.