Company External Assets
- Ryan Seymour
These scans target the areas of your IT ecosystem that are exposed to the internet or are otherwise not restricted to your internal users or systems. They can include websites, ports, services, networks, systems, and applications that need to be accessed by external users or customers.
Company External Assets - Table of Contents
- 1 Company External Assets - Table of Contents
- 2 External Scanning IP Addressing and Whitelisting
- 3 Company External Assets - Overview
- 4 Company External Assets - Details
- 4.1 Configurations
- 4.1.1 Manually Add
- 4.1.2 Bulk Upload
- 4.2 Profiles
- 4.3 Results
- 4.1 Configurations
- 5 Company External Assets - Action Toolbar Overview
- 6 Company External Assets - Action Toolbar Actions
- 7 Need Support?
External Scanning IP Addressing and Whitelisting
Check our Agent Dependency and Whitelistingdocument for details on IP’s used during external scanning from the ConnectSecure servers.
Company External Assets - Overview
External Asset is any asset ConnectSecure identifies outside the local network/firewall using parameters from your External Scan Profile(s).
Here, you will see our Default Scan Profiles and any Custom Scan Profiles you can create or have created.
ConnectSecure has three default scanning options: Quick Scan, Detailed Scan, and Deep Scan Profiles.
Company External Assets - Details
The External Assets screen contains three main pages: Configurations, Profiles, and Results.
Configurations
This is where you can manage Configurations, which are the scanning parameters. This includes the Name, Address, Address Type, and Is Excluded options.
Use the three-dot Action menu to Edit Configuration, Remove Configuration, or Scan Now.
You can add Configurations by tapping the Add button or using the Bulk Upload option.
Manually Add
Tap the Add button and complete all required fields.
Igore ports, even if they are open options, will exclude the defined port(s) from the scanning and scoring.
Exclude from scanning box will exclude the entire configuration from scanning.
Scan Later will save the configuration but not kick off a scan right away; the system will wait for the scheduler or a manually started external scan.
Bulk Upload
Tap the upload icon
Download the upload template, add your data, and come here to upload.
External Assets Bulk Upload Template: https://portal.myconnectsecure.com/assets/files/endpoints.csv
Profiles
This is where you can manage Custom Profiles, with options to Add, Edit, or Delete. This includes the Name, Profile Type, Ports, Protocol, and Service Detections.
Custom profiles are unnecessary for External Scans as the built-in Scan Profiles (Quick, Detailed, Deep) can be used.
Results
This is where you can view your Results from the external scan(s). This includes the IP, Host Name, Risk Score, Security Grade, Importance, Agent Type, Vulnerabilities, Severity, CISA Classified, EPSS Classified, Last Discovered, Last Scanned Time, Asset ID, Auto Tags, and Manual Tags.
Tap on the IP to see additional details about the scan.
Tap on the Risk Score Letter Grade to see the score breakdown.
We have a page dedicated to our Asset Risk Score grading and how to work out the math, which is found here: https://cybercns.atlassian.net/wiki/x/JoCZgQ
Company External Assets - Action Toolbar Overview
Jobs - tap to view the historical job(s) for the selected company
Alerts - tap to view the timeline-style System Events
Info - tap to view the Getting Started In App Info
Help-Link - tap to view the online documentation for this page
Company External Assets - Action Toolbar Actions
Job
Tap the Jobs icon to view the external scan job history and current details. This includes the Created Date-Time Stamp, Scan Type, Job Status, and Description.
Tap on the Created Date-Time stamp field to see additional details.
Full results are displayed in the Results section
Results
This is where you can view your Results from the external scan(s). This includes the IP, Host Name, Risk Score, Security Grade, Importance, Agent Type, Vulnerabilities, Severity, CISA Classified, EPSS Classified, Last Discovered, Last Scanned Time, Asset ID, Auto Tags, and Manual Tags.
Tap on the IP address field to see the scan results.
The full external scan results include the Grade, Last Scanned Time, Vulnerability by Severity, SSL Attack Info, Remediation Plan Recommendations, and External Ports data.
Need Support?
Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.
https://cybercns.freshdesk.com/en/support/login
