Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • e.g. Asset category has below-listed alerts and selection of all or any is allowed.

  • The Ports category has the below-listed alerts, and the selection of all or anyone is allowed.

...

  • For the Remediation category, selection of Remediation by Company OR Remediation by Assets OR Remediation by Product, Remediation by Asset and Product is allowed, and Enable Remediation for Critical and High Severity(Select any one of them).

...

  • Remediation notifications via email, MS Teams, Slack OR PSA integrations, any of the below can be selected. Any of the below is used for grouping of action items listed under the remediation plan.

    To list all the remediations for a company into one ticket OR one email or one message.

    • Remediation by Company

    OR

    To list all the remediations for an asset into one ticket OR one email or one message.

    • Remediation by Assets

    OR

    To list all the remediations for a product into one ticket OR one email or one message.

    • Remediation by Product

    OR

    To list all the remediations for a product but grouped by a fix into one ticket OR one email or one message.

    • Remediation By Product(grouped by a fix)

    OR

    To create a ticket OR an email or a message for every remediation

    • Remediation By Asset, Company And Product.

...

To Enable Tickets for Remediations based on EPSS, one of the below-listed events is to be selected from the Remediation Filters.

  • Enable Tickets for Critical and High severity Remediations

  • Enable Tickets for Remediations with EPSS greater than 0.95

  • Enable Tickets for Remediations with EPSS greater than 0.90

  • Enable Tickets for Remediations with EPSS greater than 0.85

  • Enable Tickets for Remediations with EPSS greater than 0.50

Based on the above selection of any one criteria, the remediation items will be grouped.

  • For the Vulnerability & Azure error category, the below-listed alert, and selection is allowed.

...

  • Once the Slack alerts are enabled, select the Event Set, and the Integration Profile, and click on '+' to add the record.

  • Delete the Integration profile in case not required using the bin icon as shown below.

...

  • Click on Add to see all the details of the selected fields and click on Finish.

  • Once all the fields are provided, Click on Finish to map all the selected Slack companies.

  • Delete the company record in case not required using the bin icon as shown below.

...

  • Selected companies are shown in the image below, along with details such as Existing Company Name, Company Name, Event Set, Integration Profile, Pause Ticket Creation, and Mapped Date.

  • Here click on Copy Settings toCopy the company mapping settings to other company mappings.

...

  • To copy the settings, select the desired company mappings and click on Update. This will copy the event set, integration profile, and ticket creation fields from the source company mapping to the selected target company mappings.

...

  • Using the Action column can edit or delete the integration mapping. Any mapping can be edited or deleted, whenever necessary.

...