Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

...

Panel
panelIconId1f914
panelIcon:thinking:
panelIconText🤔
bgColor#DEEBFF

What are Company Problems?

In short, these are the vulnerabilities ConnectSecure scan agent(s) have discovered. Vulnerabilites are automatically categorized into Problem Groups to understand better and communicate what type of vulnerabilities we are discovering.

...

Company Problems - Table of Contents

Table of Contents
minLevel1
maxLevel6
include
outlinefalse
indent
excludeCompany Problems - Table of Contents
typelist
class
printablefalse

...

Company Problems - Overview

As part of the V4 release, we have designed a new screen that provides a fresh view of what we call 'Problem Groups.'

With this new screen, the system will automatically classify your vulnerabilities into logical groups, making it easier for you to remediate them. It will also help you generate accurate reports catering to your specific needs.

...

Company Problems - Details

Problem Details include the following data fields: Problem Name, Description, Assets, Score, and Severity. These details will be updated based on the Problem Group Name selected.

Field Label

Description / General Use

Problem Name

Displays the detected vulnerabilities CVE-ID

Description

Provides a description of the CVE-ID (Problem Name)

Assets

Displays the count of Assets with the CVE-ID (Problem Name)

Score

Displays the Base, EPSS, Exploitability, and Impact Scores.

...

Severity

Displays the Severity for the selected CVE

Ports

Displays any associated Ports for the CVE

Script Output

Displays the script output return from the check ID

Base

Displays the Base score (CVSS)

EPSS

Displays the EPSS score; source First.ORG

Exploitability

Dispolays the Expolitability score

Impact

Displays the Impact score

Description

Dispalys the full description of the CVE

...

Global Problem Group Name - Glossary of Terms

The system automatically classifies discovered vulnerabilities into the specific Problem Group Names in the table below.

Problem Group Name

Description / Use Case

0.85 90 > EPSS >= 0.9085

Vulnerabilities grouped by EPSS Scoring >=8590/90%95%

0.90 85 > EPSS >= 0.8590

Vulnerabilities grouped by EPSS Scoring >=9085/95%90%

0.95 > EPSS >= 0.90

Vulnerabilities grouped by EPSS Scoring >=90/95%

Antivirus Not Installed

Vulnerabilities grouped by AV checks; not installed.

Backup Not Performed

Vulnerabilities grouped by Backup Software check. 

CISA Notified Vulnerabilities

Vulnerabilities grouped by CISA classification; source CISA.GOV

Critical Vulnerabilities

Vulnerabilities grouped by severity of Critical

Database Vulnerabilities

Vulnerabilities grouped by category of Database. 

EPSS >= 0.95

Vulnerabilities grouped by EPSS Scoring >=95%Firewall Misconfiguration

 Vulnerabilities grouped by category of Firewall misconfig

High Severity Vulnerabilities

Vulnerabilities grouped by severity of HighInformation Disclosure

Vulnerabilities grouped by category of Info Disclosure

Informational

 Vulnerabilities grouped by category of Info Only

Low Severity Vulnerabilities

Vulnerabilities grouped by severity of Low

Mail Vulnerabilities

Vulnerabilities grouped by category of Mail 

Medium Severity Vulnerabilities

Vulnerabilities grouped by severity of Medium

Operating System out of Support

 Operating Out of Support

Remote Access Vulnerabilities

Vulnerabilities grouped by category of Remote Access

Remote Login Vulnerabilities

Vulnerabilities grouped by category of Remote Login

Running Services

Vulnerabilities grouped by category of Running Services

SMB Vulnerabilities

Vulnerabilities grouped by category of SMB

SSL Certificate Info

Vulnerabilities grouped by category of Certifcates

SSL/TLS Vulnerabilities

 Vulnerabilities grouped by category of SSL/TLS

Web Server Fingerprint

Vulnerabilities grouped by category of Web Server Fingerprint 

...

Company Problems -

...

Action Toolbar Overview

...

Problems Suppress - tap to suppress a problem; select at least one problem to use the suppression feature.

...

Suppressed Records - tap to view any problems previously suppressed.

Scan - tap to kick off a manual scan.

Jobs - tap to view any scanned jobs and their current status.

Alerts - tap to view System Events, time-line style.

Info - tap to view the Getting Started info.

...

Company Problems -

...

Action Toolbar Actions

Problems Suppress

To suppress a problem, click the checkbox to select use the suppression, you must first select at least one problem record and then tap the Problems Suppress icon.

...

option.

...

In order to suppress a problem, there must be a reason and approval from either an internal or external user.

...

Approval Process

Method 1 - Self Approve

When using Self Approve, you must enter a Reason, Comments, and a Date Range.

...

You can also mark suppression as permanent if necessary.

...

Method 2 - Other User

Other Users will require you to select either the External or Internal User option.

...

Internal User

This is used to send the approval to an internally licensed ConnectSecure user. Their user email address will be displayed in the ‘Send To Internal User’ drop-down shown in #3 below.

...

Tap on the three-dot action menu under Action to use the Approve or Reject buttons.

...

Approve - enter your the required approval comment that is required, then tap Approve.

...

Reject - enter your the required rejection comment that is required, then tap Reject.

...

From the Company > Assets > Problems screen, you can see the Problems/Suppressed Records to view the status and details of any suppressed problems.

...

External User

This is used to send the approval to an external user using a valid email address; enter those in the ‘Send To External User’ field as shown in #3 below.

...

External Users will be directed to the ConnectSecure Portal and see the Approve/Reject Suppression panel, where you will see the Problem Name, Problem ID, Reason, Suppression Request Sent Time, Suppression Status, Suppressed On, Suppressed Til, and Company Name fields.

...

Approve - enter your the required approval comment that is required, then tap Approve.

...

Reject - enter your the required rejection comment that is required, then tap Reject.

...

From the Company > Assets > Problems screen, you can see the Problems/Suppressed Records to view the status and details of any suppressed problems.

...

Info

NOTE: Internal Users must have Admin or Approver security role permissions to approve suppression.

All approvals are captured in our audit logs.

...

Suppressed Records

Tap here to view historical data for any vulnerabilities marked as suppressed; this includes the Problem Name, Reason, Suppression Request Sent Time, Suppression Status, Suppressed On, and Suppressed Till fields.

...

...

Scan

Tap on the Asset Count from the Problems Details table, then tap the IP of any asset, and use the Scan button to initiate an asset scan.

...

Jobs

Tap to view Scan Job(s) historical data, which includes Created, Scan Type, Agent Name, Job Status, and Description.

...

Alerts

Tap Set a date range to view the System Events , timeline-style alerts.

...

and asset timeline.

...

Getting Started

Tap to view the Getting Started wizard; see the link below for additional information.

V4 Getting Started In App Info

...

Need Support?

Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.

...