{"type":"doc","content":[{"type":"heading","attrs":{"level":4},"content":[{"text":"Topics Discussed","type":"text"}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"maxLevel":{"value":"3"},"minLevel":{"value":"3"}},"macroMetadata":{"macroId":{"value":"e0c9e62c-fbc1-45b5-ae12-4a1812d43eac"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"5b1e36aa-6525-4f47-a02e-b62ce7ae51f6"}},{"type":"heading","attrs":{"level":3},"content":[{"text":"Product Overview","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The Vulnerability Scanning service provides for continuous vulnerability scanning. For Virtual Machines, the service is facilitated by a vulnerability scanning agent that is deployed with the Armor Agent (the \"Scan Agent\"). For container images, the service is facilitated by a container sensor deployed to a container host (the \"Sensor\").","type":"text"}]},{"type":"paragraph","content":[{"text":"Both the Scan Agent and Sensor collect information about the instance and includes basic asset identification information, Windows registry information (for Windows systems only), and file version and package information. This information is securely communicated to a scanning platform that assesses the data, determines the vulnerabilities that exist, and reports this data to customers in the Armor Management Portal (AMP). The Scan Agent and Sensor collect the information periodically throughout each day and reports the results to the platform. Armor posts vulnerability information in AMP on both a daily and weekly basis to represent the state of the instance as of the last scan report.","type":"text"}]},{"type":"paragraph","content":[{"text":"AMP provides information related to vulnerability information and includes vulnerability reports on a weekly basis. Each report contains details on the vulnerabilities identified, including the name and description of each vulnerability, the assets that are affected by each vulnerability, the CVSS score for the vulnerability, and the criticality rating (i.e., Critical, High, Medium, Low, or Informational). Customer can review the results by each vulnerability on a virtual machine/container image basis and by the criticality rating of the identified vulnerabilities.","type":"text"},{"type":"hardBreak"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":700,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1920,"alt":"vulnscanning.mp4","id":"b8af17ae-82dd-4afd-ac44-6b462f78e261","collection":"contentId-3519581611","type":"file","height":1080}}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Armor's vulnerability scanning service puts our customers in control of their network. Keeping them ahead of the next threat through increased visibility, preparedness, and protection. Armor's service scans internal and external networks for technical vulnerabilities, patching, and compliance issues—providing clients with the ability to mitigate risk and ensure compliance.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"To fully use this screen, you must add the following permissions to your account:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"View Vulnerability Scans","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Write New Vulnerability Report","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"View Vulnerability Exclusions","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Write Vulnerability Exclusions","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Once the Scan Agent or Sensor is installed, the initial scan starts immediately. Subsequent scans take place daily (every 4 hours for virtual machines, every 24 hours for container images) and the data displayed on the ","type":"text"},{"text":"Vulnerabilities","type":"text","marks":[{"type":"strong"}]},{"text":" tab is refreshed every day at 22:00 GMT (6pm CST or 7pm CST) depending on day light savings. ","type":"text"}]},{"type":"paragraph","content":[{"text":"Weekly reports are generated at 22:00 GMT every Sunday. Weekly reports are available for 13 months. When a report is complete, it will be available in the ","type":"text"},{"text":"Reports","type":"text","marks":[{"type":"strong"}]},{"text":" screen. Weekly Reports reflect imported data and does not initiate scans. Based on your dat's location and your environment, your report's availability in AMP may vary.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Vulnerabilities","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"You can use the ","type":"text"},{"text":"Vulnerabilities","type":"text","marks":[{"type":"strong"}]},{"text":" screen to view information for a specific vulnerability scanning report within an interactive table.","type":"text"}]},{"type":"paragraph","content":[{"text":"Users can manually refresh the table data using the refresh data link at the top of the table, but the data displayed will only reflect the state of the environment at the time of the last interval scan. For example, if your next scheduled scan occurs at 4pm, refreshing the data will show the state of your environment at noon and not reflect any patching you did at 3:30pm. ","type":"text"}]},{"type":"paragraph","content":[{"text":"This screen also displays severity levels for each detected vulnerability, along with the quantity of vulnerabilities detected for each severity level. A severity is assigned to a vulnerability based on the Common Vulnerability Scoring System (CVSS). CVSS is the accepted system to rate the severity status of a vulnerability. Armor uses ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"NVD CVSS v3.0","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"link","attrs":{"href":"https://nvd.nist.gov/vuln-metrics/cvss"}}]},{"text":" to score vulnerabilities. To learn more, please see the ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"National Vulnerability Database","type":"text","marks":[{"type":"link","attrs":{"href":"https://nvd.nist.gov/cvss.cfm"}}]},{"text":" website. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph","content":[{"text":"You can use this information to prioritize how to troubleshoot these vulnerabilities, as well as understand how these vulnerabilities can affect your environment.","type":"text"}]},{"type":"paragraph","content":[{"text":"A user concerned with patching vulnerabilities will be primarily focused on the information in the ","type":"text"},{"text":"Vulnerabilities","type":"text","marks":[{"type":"strong"}]},{"text":" tab.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"Even though a vulnerability is patched, it should be expected that AMP will not immediately reflect any updates as scans occur at 4 hour intervals. Even when manually refreshing the data, expect patched vulnerabilities to remain visible. Patched vulnerabilities should disappear from the Vulnerabilities tab after the 22:00 GMT daily refresh.","type":"text"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Security","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Vulnerability Scanning","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]}]},{"type":"table","attrs":{"layout":"full-width","width":884.0,"localId":"c4c3bbc1-746d-46f7-81a7-92e63eb52d01"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[117.0]},"content":[{"type":"paragraph","content":[{"text":"Column","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[767.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[117.0]},"content":[{"type":"paragraph","content":[{"text":"Vulnerability Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[767.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the name of the vulnerability scan report.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[117.0]},"content":[{"type":"paragraph","content":[{"text":"Affected Assets","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[767.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the number of assets affected by the vulnerability, regardless of asset type (virtual machines and/or container images).","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[117.0]},"content":[{"type":"paragraph","content":[{"text":"Excluded Assets","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[767.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the number of assets excluded from the scan for the vulnerability.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[117.0]},"content":[{"type":"paragraph","content":[{"text":"CVSS Score","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[767.0]},"content":[{"type":"paragraph","content":[{"text":"This columns displays the Common Vulnerability Scoring System (CVSS) score assigned to the vulnerability.","type":"text"}]},{"type":"paragraph","content":[{"text":"The breakdown of CVSS Scores aligns with the Severity types.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[117.0]},"content":[{"type":"paragraph","content":[{"text":"Severity","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[767.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the severity level of the vulnerability.","type":"text"}]},{"type":"paragraph","content":[{"text":"There are four severity types, based on the vulnerability's CVSS:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Critical","type":"text","marks":[{"type":"strong"}]},{"text":" vulnerabilities receive a score of 10.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"High","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"vulnerabilities receive a score of 7-10.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Medium ","type":"text","marks":[{"type":"strong"}]},{"text":"vulnerabilities receive a score of 4-7.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Low","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"vulnerabilities receive a score of 0-4.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]}]}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"There is an additional severity type called ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":". Although ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":" is listed as a severity type, in reality, ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":" simply displays activity information for corresponding plugins from third-party vendors. ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[117.0]},"content":[{"type":"paragraph","content":[{"text":"Known Exploits","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[767.0]},"content":[{"type":"paragraph","content":[{"text":"This column indicates if there are any known exploits for the vulnerability.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Yes","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" indicates that a known exploit exists for the vulnerability.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"No","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" indicates that there are no known exploits.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"text":"Clicking a ","type":"text"},{"text":"Vulnerability Name","type":"text","marks":[{"type":"strong"}]},{"text":" will take the user to the detail screen for that vulnerability. The vulnerability detail screen includes a synopsis of the vulnerability, a table of affected assets, and the remediation guidance for the vulnerability.","type":"text"}]},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"Affected Assets","type":"text","marks":[{"type":"strong"}]},{"text":" table includes:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Asset Name","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If the asset has been excluded (see ","type":"text"},{"text":"Vulnerability Exclusions","type":"text","marks":[{"type":"link","attrs":{"href":"https://armor-defense.atlassian.net/wiki/spaces/KB/pages/3519578593"}}]},{"text":")","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Asset ID","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Asset Type","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Date stamps for first and last time the vulnerability has been detected on the asset","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Exclusions","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"Vulnerability Exclusions give users the ability to manage their vulnerability programs. Users can exclude vulnerabilities on specific reports or silence them to be addressed later.","type":"text"}]},{"type":"table","attrs":{"layout":"full-width","width":950.0,"localId":"9611bfc1-7d2b-4606-ab84-ad666ce158b2"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[134.0]},"content":[{"type":"paragraph","content":[{"text":"Column","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[816.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[134.0]},"content":[{"type":"paragraph","content":[{"text":"Vulnerability ","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[816.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the name of the vulnerability excluded.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[134.0]},"content":[{"type":"paragraph","content":[{"text":"Excluded Assets","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[816.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the number of assets excluded from the vulnerability, regardless of asset type (virtual machines and/or container images).","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[134.0]},"content":[{"type":"paragraph","content":[{"text":"Reason","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[816.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the risk reason selected in the Exclude Assets form.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[134.0]},"content":[{"type":"paragraph","content":[{"text":"CVSS Score","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[816.0]},"content":[{"type":"paragraph","content":[{"text":"This columns displays the Common Vulnerability Scoring System (CVSS) score assigned to the vulnerability.","type":"text"}]},{"type":"paragraph","content":[{"text":"The breakdown of CVSS Scores aligns with the Severity types.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[134.0]},"content":[{"type":"paragraph","content":[{"text":"Severity","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[816.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the severity level of the vulnerability.","type":"text"}]},{"type":"paragraph","content":[{"text":"There are four severity types, based on the vulnerability's CVSS:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Critical","type":"text","marks":[{"type":"strong"}]},{"text":" vulnerabilities receive a score of 10.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"High","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"vulnerabilities receive a score of 7-10.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Medium ","type":"text","marks":[{"type":"strong"}]},{"text":"vulnerabilities receive a score of 4-7.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Low","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"vulnerabilities receive a score of 0-4.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

There is an additional severity type called Info. Although Info is listed as a severity type, in reality, Info simply displays activity information for corresponding plugins from third-party vendors.

","block-inline":true,"nestedContent":{"type":"doc","content":[{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"There is an additional severity type called","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":". Although","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"is listed as a severity type, in reality,","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"simply","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":"displays activity information for corresponding plugins from third-party vendors.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#3e3f40"}}]}]}]}],"version":1},"reason":"A note macro in a list item can't be created or edited in the new editor."}}}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[134.0]},"content":[{"type":"paragraph","content":[{"text":"Known Exploits","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[816.0]},"content":[{"type":"paragraph","content":[{"text":"This column indicates if there are any known exploits for the vulnerability.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Yes","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" indicates that a known exploit exists for the vulnerability.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"No","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" indicates that there are no known exploits.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Users can filter the table by any of the columns listed above.","type":"text"}]},{"type":"paragraph","content":[{"text":"Clicking the ","type":"text"},{"text":"Menu","type":"text","marks":[{"type":"strong"}]},{"text":" icon to the right of the ","type":"text"},{"text":"Expires On","type":"text","marks":[{"type":"strong"}]},{"text":" column allows users to ","type":"text"},{"text":"View","type":"text","marks":[{"type":"strong"}]},{"text":" a read-only copy of the Exclusion Details or ","type":"text"},{"text":"Remove Exclusions","type":"text","marks":[{"type":"strong"}]},{"text":" from the associated assets.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Reports","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"Reports","type":"text","marks":[{"type":"strong"}]},{"text":" screen displays a table of completed reports. Reports are compiled and published on a weekly basis.","type":"text"}]},{"type":"paragraph","content":[{"text":"Armor generates a vulnerability report once a week on Sundays at 10:00PM UTC. These reports are stored for 13 months. This weekly report is valuable for Compliance and can be provided to auditors to illustrate patching activity over time. For example, a series of reports for an environment might show a decrease in Critical vulnerabilities over a span of weeks, showing actions taken to resolve detected vulnerabilities. A user concerned with patching vulnerabilities day to day will primarily focus on the Vulnerabilities tab.","type":"text"}]},{"type":"table","attrs":{"layout":"full-width","width":990.0,"localId":"d8ed45c4-751b-475e-b4b1-45cb210ce1a3"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Column","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[808.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Report Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[808.0]},"content":[{"type":"paragraph","content":[{"text":"Reports are named by the date on which they are imported from the VS service.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Import Time","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[808.0]},"content":[{"type":"paragraph","content":[{"text":"Import time is the time at which the report is imported into AMP.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Import Status","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[808.0]},"content":[{"type":"paragraph","content":[{"text":"Import status is the status of the report job. Reports listed will show a status of either ","type":"text"},{"text":"Completed","type":"text","marks":[{"type":"strong"}]},{"text":" or ","type":"text"},{"text":"InProgress","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[182.0]},"content":[{"type":"paragraph","content":[{"text":"Vulnerabilities","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[808.0]},"content":[{"type":"paragraph","content":[{"text":"This column provides an at-a-glance view of the number of vulnerabilities included in a specific report, grouped by severity.","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Change in Quantity of Severity","type":"text"}]},{"type":"paragraph","content":[{"text":"On April 1, 2021 we switched from the vulnerability subagent platform severity scoring to the industry standard of NVD CVSS v3.0 (","type":"text"},{"text":"https://nvd.nist.gov/vuln-metrics/cvss","type":"text","marks":[{"type":"link","attrs":{"href":"https://nvd.nist.gov/vuln-metrics/cvss"}}]},{"text":"). Some of what the vulnerability subagent deemed critical, may not have a 10.0 CVSS v3.0 score. As a result of this, you may find a significant increase in the number of critical severities. Please note that the vulnerabilities themselves were detected previously and only scored differently.","type":"text"}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}]},{"type":"paragraph","content":[{"text":"Data from within a Report can be filtered either by ","type":"text"},{"text":"Vulnerability","type":"text","marks":[{"type":"strong"}]},{"text":" or ","type":"text"},{"text":"Virtual Machine","type":"text","marks":[{"type":"strong"}]},{"text":" using the tabs at the top of the report.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Enable Vulnerability Scanning for Virtual Machines","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"Use the following commands to manage the Vulnerability Scanning service within the Scan Agent.","type":"text"}]},{"type":"paragraph","content":[{"text":"Install Vulnerability Scanning:","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"Windows: C:\\.armor\\opt\\armor.exe vuln install\nLinux: /opt/armor/armor vuln install","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"text":"Uninstall Vulnerability Scanning:","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"Windows: C:\\.armor\\opt\\armor.exe vuln uninstall\nLinux: /opt/armor/armor vuln uninstall ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Detect log4shell","type":"text"}]},{"type":"codeBlock","content":[{"text":"Windows: C:\\.armor\\opt\\armor.exe vuln detect-log4shell\nLinux: /opt/armor/armor vuln detect-log4shell","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"Example: /opt/armor/armor vuln detect-log4shell /usr/share","type":"text"}]},{"type":"paragraph","content":[{"text":"If no flag (/usr/share in the example above) is provided, the command will search from the filesystem root.","type":"text"}]}]},{"type":"paragraph","content":[{"text":"Vulnerability Scanning Help","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"Windows: C:\\.armor\\opt\\armor.exe vuln help\nLinux: /opt/armor/armor vuln help ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Enable Vulnerability Scanning for Container Images","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"For instructions on how to get started with Container Images, please see the documentation provided ","type":"text"},{"text":"here","type":"text","marks":[{"type":"link","attrs":{"href":"https://armor-defense.atlassian.net/wiki/spaces/KB/pages/3519579647"}}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"View a Report","type":"text"}]},{"type":"rule"},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Security","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Vulnerability Scanning","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click the ","type":"text"},{"text":"Reports","type":"text","marks":[{"type":"strong"}]},{"text":" tab.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Locate and select the desired scan.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"On the next screen, you can filter the table ","type":"text"},{"text":"By Vulnerabilities","type":"text","marks":[{"type":"strong"}]},{"text":" or ","type":"text"},{"text":"By VM","type":"text","marks":[{"type":"strong"}]},{"text":" (virtual machine / host).","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"heading","attrs":{"level":4},"content":[{"text":"Troubleshooting","type":"text"}]},{"type":"paragraph","content":[{"text":"If you do not see any data in the ","type":"text"},{"text":"Vulnerability Scanning","type":"text","marks":[{"type":"strong"}]},{"text":" screen, consider that:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The scanning is not complete.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The scan takes place every Sunday at approximately 10:00 PM, local server time.","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You do not have permission to view this screen.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You must have the ","type":"text"},{"text":"View Vulnerability Scans","type":"text","marks":[{"type":"strong"}]},{"text":" permission enabled. Contact your account administrator to enable this permission. To learn how to update your permissions, see ","type":"text"},{"text":"Roles and Permissions","type":"text","marks":[{"type":"link","attrs":{"href":"https://armor-defense.atlassian.net/wiki/spaces/KB/pages/3519587062"}}]},{"text":".","type":"text"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"If a virtual machine is incorrectly labeled as ","type":"text"},{"text":"offline","type":"text","marks":[{"type":"strong"}]},{"text":" in a report, then contact Armor Support to run the Armor Toolbox.","type":"text"}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Filter By Vulnerabilities","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"When you filter the table","type":"text"},{"text":" By Vulnerabilities","type":"text","marks":[{"type":"strong"}]},{"text":", you will see:","type":"text"}]},{"type":"table","attrs":{"layout":"full-width","width":1144.0,"localId":"54e1e974-0354-41a1-8177-e7c3ef334fc3"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"COLUMN NAME","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[954.0]},"content":[{"type":"paragraph","content":[{"text":"DESCRIPTION","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Vulnerability Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[954.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the name of the vulnerability.","type":"text"},{"type":"hardBreak"},{"text":"You can click the ","type":"text"},{"text":"Vulnerability Name","type":"text","marks":[{"type":"strong"}]},{"text":" to learn more about the vulnerability. You will be taken to a detailed page where you can review a description of the vulnerability, along with the solution. To learn how to troubleshoot, see ","type":"text"},{"text":"Troubleshoot a vulnerability","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.armor.com/display/KBSS/ANYWHERE+Vulnerability+Scan+Details#ANYWHEREVulnerabilityScanDetails-Troubleshootavulnerability"}}]},{"text":".","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Affected Assests","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[954.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the virtual machines (host) affected by the vulnerability.","type":"text"}]},{"type":"paragraph","content":[{"text":"If you are unfamiliar with the name of a virtual machine, you can use the ","type":"text"},{"text":"Virtual Machines","type":"text","marks":[{"type":"strong"}]},{"text":" screen to search.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Copy the desired virtual machine name (host name or CoreInstance ID).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Infrastructure","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Virtual Machines","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the search field, paste the virtual machine name (host name or CoreInstance ID), and then click the magnifying glass icon.","type":"text"}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Category","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[954.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the category(s) associated with the vulnerability. For a complete list of vulnerability categories and QIDs, please see this","type":"text"},{"text":" documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://qualysguard.qualys.com/qwebhelp/fo_portal/knowledgebase/vulnerability_categories.htm"}}]},{"text":".","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Known Exploits","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[954.0]},"content":[{"type":"paragraph","content":[{"text":"This column indicates if there are any known exploits for the vulnerability.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Yes","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" indicates that a known exploit exists for the vulnerability.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"No","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}},{"type":"strong"}]},{"text":" indicates that there are no known exploits.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[190.0]},"content":[{"type":"paragraph","content":[{"text":"Severity","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[954.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the severity of the vulnerability.","type":"text"}]},{"type":"paragraph","content":[{"text":"There are four severity types, based on the vulnerability's CVSS:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Critical ","type":"text","marks":[{"type":"strong"}]},{"text":"vulnerabilities receive a score of 10.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"High ","type":"text","marks":[{"type":"strong"}]},{"text":"vulnerabilities receive a score of 7-10.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Medium","type":"text","marks":[{"type":"strong"}]},{"text":" vulnerabilities receive a score of 4-7.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Low ","type":"text","marks":[{"type":"strong"}]},{"text":"vulnerabilities receive a score of 0-4.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"There is an additional severity type called ","type":"text"},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":". Although ","type":"text"},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":" is listed as a severity type, in reality, ","type":"text"},{"text":"Info","type":"text","marks":[{"type":"strong"}]},{"text":" simply displays activity information for corresponding plugins from third-party vendors.","type":"text"}]}]}]}]},{"type":"paragraph"},{"type":"heading","attrs":{"level":3},"content":[{"text":"Filter By Virtual Machines","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"You will only see vulnerabilities for your active virtual machines.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#091e42"}}]}]},{"type":"paragraph","content":[{"text":"When you filter the table ","type":"text"},{"text":"By VM ","type":"text","marks":[{"type":"strong"}]},{"text":"(virtual machines / host) you will see:","type":"text"}]},{"type":"table","attrs":{"layout":"full-width","width":790.0,"localId":"8467b238-820d-4883-9ded-dc3952165310"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[116.0]},"content":[{"type":"paragraph","content":[{"text":"COLUMN","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[674.0]},"content":[{"type":"paragraph","content":[{"text":"DESCRIPTION","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[116.0]},"content":[{"type":"paragraph","content":[{"text":"VM Name","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[674.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the virtual machines (host) affected by this vulnerability.","type":"text"}]},{"type":"paragraph","content":[{"text":"If you are unfamiliar with the name of a virtual machine, you can use the ","type":"text"},{"text":"Virtual Machines","type":"text","marks":[{"type":"strong"}]},{"text":" screen to search.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Copy the desired virtual machine name (host name or CoreInstance ID).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Infrastructure","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Virtual Machines","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the search field, paste the virtual machine name (host name or CoreInstance ID), and then click the magnifying glass icon.","type":"text"}]}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[116.0]},"content":[{"type":"paragraph","content":[{"text":"Last Scan","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[674.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the date and time of the last scan.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[116.0]},"content":[{"type":"paragraph","content":[{"text":"Critical","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[674.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays the number of vulnerabilities that contained a score of 10.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[116.0]},"content":[{"type":"paragraph","content":[{"text":"High","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[674.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays a vulnerability that scored between 7 to 10 on the CVSS.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[116.0]},"content":[{"type":"paragraph","content":[{"text":"Medium","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[674.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays a vulnerability that scored between 4 to 7 on the CVSS.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[116.0]},"content":[{"type":"paragraph","content":[{"text":"Low","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[674.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays a vulnerability that scored between 0 to 4 on the CVSS.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[116.0]},"content":[{"type":"paragraph","content":[{"text":"Info","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[674.0]},"content":[{"type":"paragraph","content":[{"text":"This column displays activity information regarding corresponding plugins from a third-party vendor.","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Request a New Vulnerability Scan Report","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"A weekly vulnerability scan report is available in AMP. If you want a new report outside of the weekly report, you can request an \"ad-hoc\" report as needed.*","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Security","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Vulnerability Scanning","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click the ","type":"text"},{"text":"Reports","type":"text","marks":[{"type":"strong"}]},{"text":" tab.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Get New Report","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the ","type":"text"},{"text":"New Report Request","type":"text","marks":[{"type":"strong"}]},{"text":" window, click ","type":"text"},{"text":"Submit","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The latest scan report will be requested, and will display in the list of reports on the ","type":"text"},{"text":"Vulnerability Scanning","type":"text","marks":[{"type":"strong"}]},{"text":" screen in a ","type":"text"},{"text":"Pending","type":"text","marks":[{"type":"strong"}]},{"text":" status.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You may need to refresh the page to view the report status.","type":"text"}]}]}]}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"If you recently provisioned a new virtual machine, configured new container images, or recently patched a vulnerability, Armor recommends that you wait at least 6 hours to ensure the changes are reflected in the latest report.","type":"text"}]}]},{"type":"paragraph","content":[{"text":"*Assets not upgraded to Agent 3.0 are limited to one report every 24 hours.","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"When resolving vulnerabilities, an old package must be removed after installing a new one in order for the vulnerability to be considered resolved. As long as a vulnerable package is on the machine, the vulnerability will remain.","type":"text"}]},{"type":"paragraph","content":[{"text":"For more information, please refer to the documentation ","type":"text"},{"text":"here ","type":"text","marks":[{"type":"link","attrs":{"href":"https://qualys-secure.force.com/discussions/s/article/000006209"}}]},{"text":"and ","type":"text"},{"text":"here","type":"text","marks":[{"type":"link","attrs":{"href":"https://qualys-secure.force.com/discussions/s/question/0D52L00004TnxEDSAZ/qualys-reports-vulnerability-still-exists-even-after-the-fix-is-applied"}}]},{"text":".","type":"text"}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Export a Report of Vulnerabilities","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"From the ","type":"text"},{"text":"By Vulnerability","type":"text","marks":[{"type":"strong"}]},{"text":" section, you can also download a CSV report.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Security","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Vulnerability","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"Scanning","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"By Vulnerability","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"(Optional) Use the filter function to customize the data displayed.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Below the table, click ","type":"text"},{"text":"CSV","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You have the option to export all the data (","type":"text"},{"text":"All","type":"text","marks":[{"type":"strong"}]},{"text":") or only the data that appears on the current screen (","type":"text"},{"text":"Current Set","type":"text","marks":[{"type":"strong"}]},{"text":").","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Export a Report of a Virtual Machines","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"From the ","type":"text"},{"text":"By VM ","type":"text","marks":[{"type":"strong"}]},{"text":"section, you can also download a CSV report.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), in the left-side navigation, click ","type":"text"},{"text":"Security","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Vulnerability","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"Scanning","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"By VM","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"(Optional) Ue the filter function to customize the data displayed.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Below the table, click ","type":"text"},{"text":"CSV","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You have the option to export all the data (","type":"text"},{"text":"All","type":"text","marks":[{"type":"strong"}]},{"text":") or only the data that appears on the current screen (","type":"text"},{"text":"Current Set","type":"text","marks":[{"type":"strong"}]},{"text":").","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Log Search for Vulnerability Scanning","type":"text"}]},{"type":"rule"},{"type":"paragraph","content":[{"text":"Users can search for Vulnerability events in Log Search. For instructions on how to access and use Log Search, please see our documentation ","type":"text"},{"text":"here","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.armor.com/display/KBSS/Log+Search"}}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"An example of Vulnerability logs can be seen below:","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":700,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1280,"id":"667c2df8-1dcb-4353-ba32-171e97fe1c09","collection":"contentId-3519581611","type":"file","height":516}}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"text":"For a full list of Log Search fields and descriptions, please visit our glossary ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]},{"text":"here","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.armor.com/display/KBSS/Log+Search#LogSearch-LogSearchFieldGlossaryLogSearchFieldGlossary"}}]},{"text":". ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#333333"}}]}]},{"type":"paragraph"},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"heading","attrs":{"level":4},"content":[{"text":"Troubleshooting","type":"text"}]},{"type":"paragraph","content":[{"text":"Each listed vulnerability contains information on how to troubleshoot the vulnerability, typically by downloading a patch from an external source.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the Armor Management Portal (AMP), on the left-side navigation, click ","type":"text"},{"text":"Security","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Vulnerability Scanning","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select a vulnerability scanning report.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the next screen, select ","type":"text"},{"text":"By Vulnerabilities","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select a vulnerability. You will be taken to a description page where you can review a description of the vulnerability, including the solution.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Under ","type":"text"},{"text":"See Also","type":"text","marks":[{"type":"strong"}]},{"text":", click the link to access external information and to download a patch.","type":"text"}]}]}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

To return to the previous screen and view additional vulnerabilities for the current report, click the name of the current report in the top menu.

","block-inline":true,"nestedContent":{"type":"doc","content":[{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"To return to the previous screen and view additional vulnerabilities for the current report, click the name of the current report in the top menu.","type":"text"}]}]}],"version":1}}}}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"heading","attrs":{"level":4},"content":[{"text":"Troubleshooting","type":"text"}]},{"type":"paragraph","content":[{"text":"If you do not see any data in the ","type":"text"},{"text":"Vulnerability Scanning","type":"text","marks":[{"type":"strong"}]},{"text":" screen, consider that:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The scanning is not complete.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The scan takes place every Sunday at approximately 10:00 PM, local server time.","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Your firewall rules have not been updated to support this feature. This applies onto for the Scan Agent and not Container Images","type":"text"},{"type":"hardBreak"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":844,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":844,"id":"b64e85fc-d4d2-473e-909d-b4a2ce3e3ce9","collection":"contentId-3519581611","type":"file","height":245}}]},{"type":"paragraph","content":[{"text":"* The agent will perform a lookup to the applicable DNS entry, which may resolve to one of ","type":"text"},{"text":"multiple Amazon Web Services based subnets","type":"text","marks":[{"type":"link","attrs":{"href":"https://ip-ranges.amazonaws.com/ip-ranges.json"}}]},{"text":". As a result, if your firewall does not support outbound filtering by domain name, then you may need to open all outbound traffic to 443/tcp to accommodate this service.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You do not have permission to view this screen.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"You must have the ","type":"text"},{"text":"View Vulnerability Scans","type":"text","marks":[{"type":"strong"}]},{"text":" permission enabled. Contact your account administrator to enable this permission. To learn how to update your permissions, see ","type":"text"},{"text":"Roles and Permissions","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.armor.com/display/KBSS/Roles+and+Permissions"}}]},{"text":".","type":"text"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"If a virtual machine is incorrectly labeled as ","type":"text"},{"text":"offline","type":"text","marks":[{"type":"strong"}]},{"text":" in a report, then contact Armor Support to run the Armor Toolbox.","type":"text"}]}]},{"type":"paragraph","content":[{"type":"hardBreak"},{"text":"Related Documentation","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Vulnerability Scanning for Compliance","type":"text","marks":[{"type":"link","attrs":{"href":"https://armor-defense.atlassian.net/wiki/spaces/KB/pages/3519582246"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Vulnerability Scanning Exclusions","type":"text","marks":[{"type":"link","attrs":{"href":"https://armor-defense.atlassian.net/wiki/spaces/KB/pages/3519580410"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Vulnerability Remediation","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.armor.com/display/KBSS/Vulnerability+Remediation"}}]}]}]}]}],"version":1}

Browser not supported