Company Firewalls

https://youtu.be/_i-tEgtQYJ0

What is a firewall?

A firewall is a network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules. The primary purpose of a firewall is to establish a barrier between a secure internal network and untrusted external networks, such as the Internet. By inspecting and regulating network traffic, firewalls help prevent unauthorized access, protect against cyber threats, and ensure the security and privacy of the network.

image-20240321-191458.png

 

NOTE: Firewalls will only be displayed under the Firewall section if you have added Firewall credentials to the Discovery setting or configured an API integration. Any other firewall asset detected will be displayed under the Assets section.


Company Firewalls - Table of Contents


Company Firewalls - Overview

Tap on the Assets > Firewalls section to view any discovered/integrated firewalls.

If you do not see any Firewalls, you need to add Firewall Credentials under the Discovery Settings and Credentials section for the company.

Tap on the firewall's IP to see the firewall details.


Company Firewalls - Details

Firewall Assets Table View

The section contains the table view of your firewall assets, which include the following data fields.

Field

Description

Field

Description

IP

Displays the IP address of the firewall asset

Host Name

Displays the hostname of the firewall asset

Company Name

Displays the company name associated with the firewall asset

Risk Score

Displays the risk score for the firewall asset

Importance

Displays the importance of the firewall asset

Agent Type

Displays the applicable agent type

Vulnerabilities

Displays the total count of vulnerabilities for the firewall assets

Critical

Displays the count of Critical vulnerabilities for the firewall asset

High

Displays the count of High vulnerabilities for the firewall asset

Medium

Displays the count of Medium vulnerabilities for the firewall asset

Low

Displays the count of Low vulnerabilities for the firewall asset

CISA Vulnerabilities

Displays the count of CISA vulnerabilities for the firewall asset

EPSS > 95 Vulnereabilites

Displays the count of EPSS > 95% vulnerabilities for the firewall asset

Asset ID

Displays the Asset ID for the firewall asset

Auto Tags

Displays associated Auto Tags

Manual Tags

Displays associated Manual Tags


Firewall Asset Details View

View the firewall asset details by clicking on the IP of a firewall asset.

You will then see the firewall details view.

Overview

This includes the vendor logo/icon, IP address, importance, Discovered Time, and Last Scanned Time.


System

This includes the Platform, OS, OS Build, Serial Number, and Version information.


Rules

This includes the firewall rules, which include Name, Description, Rule Type, Action, Protocol, Source, Source Port, Source Interface, Destination, Destination Port, Destination Interface, Additional Info, and Asset ID.


Users

This includes the Users, which include Name, Email, Description, User Type, Group Name, and Additional Info.


Interfaces

This includes the Interfaces, which include Name, Description, Parent Interface, Interface Type, IP, and Additional Info.


Groups

This includes the Groups, which include Name, Description, Group Type, and Members.


License

This includes the License, which includes Name, Expires, Status, Type, Version, and Additional Info.


Problems

This includes the Problems, which include Problem Groups where vulnerabilities are listed.


Company Firewalls - Action Toolbar Overview

The action toolbar includes Timeline, Delete, Jobs, Alerts, and Info.


Company Firewalls - Action Toolbar Actions

Timeline

Select a firewall asset and tap the Timeline action to see the Asset Timeline window.

Set the Start and End date fields and the system will query for the events.


Delete

Use this to delete a firewall asset. First, select at least one of the assets, then tap the Delete to remove it from the portal.

Then tap the Yes button to complete; otherwise, click Cancel to back out.


Jobs

Tap to view the firewall scan jobs history.


Alerts

Set a date range to view the System Events and asset timeline.


Getting Started

Tap to view the Getting Started wizard; see the link below for additional information.

V4 Getting Started In App Info


Need Support?

Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.

https://cybercns.freshdesk.com/en/support/login


Â