An asset management technology that enables a complete IT infrastructure inventory and the tracking of its state.
To solve information security tasks, such as aggregating data from different sources, correlating events and managing incidents, checking device compliance with security policies, tracking vulnerabilities, and assessing risks, it is necessary to maintain an up-to-date asset database.
An asset is an element of the IT infrastructure connected to the network (such as a server, computer, or network equipment).
The patented asset management technology developed by Positive Technologies automatically finds and identifies all devices on the network, and verifies their data. It takes into account the type of asset and the results of the checks, ensuring a full and accurate inventory without missing a single device.
It collects information about more than 3,000 asset parameters (including FQDN, MAC and IP addresses, OS types, network node names, and node virtualization signs). When IP or MAC addresses change, the asset is not duplicated; instead, knowledge about it continues to be collected in one record.
It monitors appearance of new network nodes and services, OS reinstallations, and hardware configuration changes, and performs integrity checks. This helps avoid missing important infrastructure changes and improves system security.
It imports asset data from external systems. It also controls assets with incomplete information, as well as recently discovered and potentially removed assets.
It considers the importance of assets for business processes, their impact on data confidentiality and integrity, uptime, and other factors.
The asset management system analyzes the attributes of each device, comparing them with the attributes of previously known assets. Based on this comparison, the following is determined:
Key parameters for comparison:
*The FQDN is determined directly on the node during auditing, which ensures data accuracy regardless of external factors.
Asset management technology provides security specialists with up-to-date information about the IT infrastructure security. This allows specialists to assess the network components' importance to business processes across all systems and to remediate the most dangerous vulnerabilities in a timely manner.
MaxPatrol VM separates asset information collection from vulnerability identification. The system stores the results of previous scans, so the information about asset state always remains current. This helps avoid missing important vulnerabilities on assets without having to wait for scheduled scans.
MaxPatrol VM dashboards show the most vulnerable assets and highlight the relevance of the asset data.
Using asset management technology, MaxPatrol SIEM users can identify source unavailability, anomalies in event flow distribution, and delays in receiving events from sources to ensure a timely response.
Contact us.
During the consultation we'll propose a solution precisely tailored to your organization.