- Overview
- Features
- Architecture & Open API
- Try NeXpose
- Buy NeXpose
- System Requirements
- Vulnerabilities Tested
- NeXpose Information
Of further interest:
- White paper - NeXpose Vulnerability Management
- NeXpose Datasheet
NeXpose Sites & Asset Groups with Access Control
NeXpose provides multiple layers of access to its users. Local maintenance groups may view pertinent data and ticketing functions, while global risk assessment is provided at a high level through easy to generate reports delivered via e-mail as PDF or HTML files.
NeXpose has a flexible architecture that enables organizations to divide security responsibilities across the enterprise. NeXpose provides two classes of users, Administrators and Users. Administrators are able to create and manage Sites and cause scanning of systems, while Users are able to access information about systems after the Administrator has placed their user-id into an Asset Group Access Control List.
A Site is a logical collection of devices that can be viewed and scanned by administrators. Defining sites enables each scan to be optimized for the types and criticality of vulnerabilities that could be present. A site is defined by one NeXpose Scanning Engine. If your network environment is large, you may wish to consider defining multiple sites with multiple scanning engines to optimize the scanning time or organize the work by location. Sites can have access control lists to limit control to designated administrators.
An Asset Group is a collection of devices or Sites that will be reported against as a single entity. Defining multiple asset groups provides non-administrative users the ability to view and report vulnerabilities on devices from multiple sites, such as all web servers or the entire organization. An organization's use of Asset Groups will be determined by the size of the network, whether it has multiple locations or when there is a need to separate the responsibilities of scanning devices and remediating vulnerabilities.
The diagram above conceptually describes sites and asset groups by showing how sites can be mapped to a physical network for scanning, and asset groups can be defined independently of sites for distributing security responsibility across the organization.
Take a closer look at NeXpose. Request your 20 day evaluation today.