Vulnerability Management

The Vulnerability Scanner Module™ (VSM) is an on-demand scanning and vulnerability management tool that researches thousands of different types of vulnerabilities and provides regular security scans that are integrated and correlated with data and alerts from other appliances. These scan alerts are correlated with alerts produced by the behavioral analysis and correlation engine, and are further prioritized and escalated based on attacks against detected vulnerabilities.

The VSM, which is integrated with a penetration testing tool that allows you to exploit detected vulnerabilities, keeps pace as your network changes, adapting and continuing to research potential security issues throughout your network infrastructure. The VSM also utilizes an asset database to help keep track of resources, as well as organize and retrieve information for remediation of vulnerabilities. A trend analysis report option allows you to quantitatively analyze your remediation program.

In addition to its vast research capabilities, the VSM module’s extensive reporting features give you individual vulnerability reports for each device, with associated risk levels (informational, low, high, and severe) and appropriate links to remediation steps. With optional VSM software, you can design and generate custom vulnerability assessment reports quickly and easily, so you can present findings from even the largest network scans in an easy-to-read format with color-coded charts.

The unique research, tracking, analysis and reporting features of the VSM allow you to generate PCI Compliance reports so you can evaluate your compliance posture and ensure that your network is compliance with PCI standards. The Vulnerability Scanner Module also includes:

On demand scanning options:

• Light – limited port scans that identify common vulnerabilities such as those within DNS, Web, or FT and SMTP;
• Heavy – full port scans that look for all known vulnerabilities and potential risk areas; and
• DOS – scans that identify all dangerous vulnerabilities on the appropriate ports; a scan scheduler – with customizable scanning options for immediate, daily, weekly, monthly, quarterly and annual scans; and a private web portal that allows customers to view alerts, scans, and run reports in real-time.

Summary and management reports for easier risk mitigation:

• Current Risk Report
• Current Risk Summary
• Ignored Vulnerabilities Report
• Vulnerability Escalation Report
• Vulnerability History Report
• Report by Vulnerability
  • Detailed Description:
  • Consequences:
  • Detailed Remediation steps
  • Risk Factor:
  • Links to CVEs, Patches, etc.