Advanced Configuration; Exclusion List (Unmonitored Objects) - Stormshield SN series Configuration Manual

SERVERS
Servers: SSH Servers –HTTP
Servers / Web – Database
Servers – FTP Server – Mail
Servers and Operating
Systems
Servers – critical flaws: SSH-
Web-Apps-DB-DNS-Web
Server-FTP Server-Misc-Mail
Server-P2P-OS
FTP Servers
Mail servers
Web servers: web/HTTP
content servers
Database servers (SQL)
"All known applications" profile
This profile allows assigning to an object (host, group, network or address range), the detection of
all client/server and operating system vulnerabilities detected by the Stormshield Network
Vulnerability Manager.

Advanced configuration

Data lifetime (days) [1 – 30]: Duration for which data (application, vulnerability) will be kept
without traffic or updates detected.

Exclusion list (unmonitored objects)

Network object (host
or group – network –
address range)
The application inventory carried out by Stormshield Network Vulnerability Manager is
based on the IP address of the host that initiates traffic in order to index applications.
For hosts that have an IP address shared by several users, for example an HTTP proxy, a
TSE server or even a router that performs dynamic NAT on the source may cause a
significant load on the module. You are therefore advised to place the addresses of these
hosts in an exclusion list (unsupervised elements).
Page 363/448
CLIENT APPLICATIONS AND
OPERATING SYSTEMS
Client applications and
operating systems (OS)
Client applications and
operating systems (OS) –
critical flaws
Once objects have been associated with their profiles, one or several objects can be
excluded from the analysis.
As such, regardless of the configuration of the monitored objects, the members of this
exclusion list will not be monitored.
Objects to be excluded can be selected in this table by clicking on Add.
WARNING
SNS - USER CONFIGURATION MANUAL V.3
CLIENTS
Mail client: Client, Mail
(Thunderbird, Outlook,
e-mail ...)
Browsers and other
web clients: Web
clients, RSS feed
readers
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
VULNERABILITY MANAGEMENT
TOOLS
Security tools: Antivirus,
Security tools and
Vulnerability scanner or
Network scanner
Administration tools:
Administration client FTP,
SSH etc.