Viewing Vulnerabilities In The Siteprotector Console - IBM Proventia Network Enterprise Scanner User Manual

Chapter 12: Interpreting Scan Results

Viewing Vulnerabilities in the SiteProtector Console

Introduction
About vulnerability
assessment
Viewing
vulnerabilities
Creating custom
views
Filtering events and
vulnerabilities
170
You can view the vulnerability assessment data that your Enterprise Scanner agent
collects in the SiteProtector Console. The data appears in the Analysis view for the Site or
group you have selected.
Vulnerability assessment data identifies weaknesses in your network and hosts. Intruders
or employees can exploit these weaknesses and attack or compromise your network and
hosts.
From the Analysis view on the SiteProtector Console, you can view vulnerabilities by the
following categories:
Vuln Analysis–Assets
●
Vuln Analysis–Detail
●
Vuln Analysis–Object
●
Vuln Analysis–Vuln Name
●
If the default views do not meet your needs, you can create custom analysis views. When
you customize a view, you can add or remove columns or filters, change the values of
filters, or rearrange the columns.
Using incidents and exceptions enables you to filter events and vulnerabilities according
to the following criteria:
date
●
single source IP address or range of IP addresses
●
single target IP address or range of IP addresses
●
tag name
●
object name
●
observance type
●
You determine how many rows of incidents or exceptions you want to display in an
analysis view in the Console options.
IBM Internet Security Systems