Company External Assets - Table of Contents
Company External Assets - Overview
External Asset is any asset ConnectSecure identifies outside the local network/firewall using parameters from your External Scan Profile(s).
Here, you will see our Default Scan Profiles and any Custom Scan Profiles you can create or have created.
ConnectSecure has three scanning options as default: Quick Scan, Detailed Scan, and Deep Scan Profiles.
Company External Assets - Details
The External Assets screen contains three main pages: Profiles, Configurations, and Results.
Profiles
This is where you can manage Custom Profiles, with options to Add, Edit, or Delete. This includes the Name, Profile Type, Ports, Protocol, and Service Detections.
Custom profiles are unnecessary for External Scans as the built-in Scan Profiles (Quick, Detailed, Deep) can be used.
See below for additional details.
Configurations
This is where you can manage Configurations, which are the scanning parameters. This includes the Name, Address, Address Type, and Is Excluded options.
See below for additional details.
Results
This is where you can view your Results from the external scan(s). This includes the IP, Host Name, Risk Score, Security Grade, Importance, Agent Type, Vulnerabilities, Severity, CISA Classified, EPSS Classified, Last Discovered, Last Scanned Time, Asset ID, Auto Tags, and Manual Tags.
See below for additional details.
Company External Assets - Side Navigation Toolbar Overview
Add Profile - tap here to add a new Custom Profile for external scanning
Edit Profile - tap here to edit an existing Custom Profile; you must select one record first
Remove Profile - tap here to remove a Custom Profile; must select at least one record
Jobs - tap here to view the job history
Alerts - tap here to view System Events, timeline-style
Company External Assets - Side Navigation Toolbar Actions
Profiles
This is where you can manage Custom Profiles, with options to Add, Edit, or Delete.
Custom profiles are unnecessary for External Scans as the built-in Scan Profiles (Quick, Detailed, Deep) can be used.
Add
Complete all required fields marked by the red asterisks, then tap Save to complete.
Edit
You must select one existing Custom Profile using the checkbox next to the Name, then tap the Edit Profile to edit the details.
Tap Save when you are done with Edit details; otherwise, click Cancel to back out.
Delete
You must select one existing Custom Profile using the checkbox next to the Name, then tap Remove Profile to remove it permanently. You will have to tap on Yes in the Confirmation box to complete.
Configurations
This is where you can Add, Edit, or Delete Configurations, which are the external scan parameters. This includes the Name, Address, Address Type, and Exclude options.
Add
Tap the Add Configuration icon icon to create a new External Scan Endpoint record.
Complete the required fields, including Name, Address Type, Scan Profile, and optional for Port Exclusions, Tags, and Scan Later options.
Field | Description |
|---|---|
Name | Displays the given name for the external scan endpoint name |
Address | Displays the given name for the external can address name |
Address Type | Displays the selected address type, which includes Static IP, Domain, and IP Range scan options. |
Scan Profile | Select to associate your scan configuration with a scan profile; this tells your configuration what type of scan to do (Quick, Detailed, Deep, or Custom) |
Ignore Ports | Input any ports you want to ignore, even if they are open, during an external scan |
Tags | Tap the + icon to add a Name and Value to target only tags meeting the set criteria For Tags to work, the Tag Name and Value must be entered exactly, without spaces. For example, if the Tag appears as Asset Type: Workstation, then the Name field should be entered as Asset Type, and the Value field should be entered as Workstation. |
Exclude From Scanning | Check the box if you want to exclude the configured options from external scans |
Scan Later | Check the box if you wish to scan later; if not, the scan will initiate upon saving. |
Edit
First, select any existing record, then tap Edit Configuration.
Tap Save to complete changes; otherwise, click Cancel to back out.
Remove
First, select at least one existing record, then tap the Remove Configuration icon.
Tap Yes on the Confirmation box to complete removal; otherwise, tap on Cancel to back out.
Scan Now
First, select at least one existing external scan endpoint record, then tap the Scan Now icon to begin the external scan.
You can view the progress/status of the external scan job under the Jobs icon.
Jobs
Tap the Jobs icon to view the external scan job history and current details. This includes the Created Date-Time Stamp, Scan Type, Job Status, and Description.
Tap on the Created Date-Time stamp field to see additional details.
Full results are displayed in the Results section
Results
This is where you can view your Results from the external scan(s). This includes the IP, Host Name, Risk Score, Security Grade, Importance, Agent Type, Vulnerabilities, Severity, CISA Classified, EPSS Classified, Last Discovered, Last Scanned Time, Asset ID, Auto Tags, and Manual Tags.
Tap on the IP address field to see the scan results.
The full external scan results include the Grade, Last Scanned Time, Vulnerability by Severity, SSL Attack Info, Remediation Plan Recommendations, and External Ports data.
