Host Vulnerability Management (HVM) integrations such as Qualys and Tenable leverage threat intelligence to help organizations prioritize vulnerabilities for remediation.  The Asset Manager HVM integrations enable your organization to:

• Identify devices in your network that are not managed by Qualys or Tenable Security Center

• Push metadata about those devices to integrated vulnerability management systems

• Extend the capabilities of your vulnerability management platform by feeding it Asset Manager’s authoritative data set. 

The Tenable integration tells you which hosts on your enterprise network are either undefended by Tenable or unknown to Asset Manager. By comparing Asset Manager's comprehensive index of all your network devices against that subset of network devices managed by Tenable, you can generate a list of network hosts that are not managed in the Tenable Security Center and then push that information to an asset group on the Tenable Security Center server. What's pulled from Tenable to Asset Manager is only what you request, not an exhaustive collection of all the device details and attributes that Tenable manages. The enables Asset Manager to scan just the network device attributes of value to you.

Endpoint Detection and Response software is installed on last-hop, non-forwarding devices such as laptops and printers to protect them from malware, exploits, and attacks. When you activate endpoint security integrations, Asset Manager queries the integrated applications at the frequency you configure to identify the endpoints:

• Only the integrations are managing

• Only Asset Manager is managing

• Endpoints both are managing

Asset Manager also pushes unmanaged devices to the integration partner so that agents can be installed on them.

The Trellix ePolicy Orchestrator integration provides Trellix ePO customers with a way to ensure that Trellix's ePO agent is installed comprehensively on all network devices in one or more network segments. The integration reconciles Trellix findings with Asset Manager findings, uncovering:

• Assets lacking the Trellix ePO agent

• Assets to which visibility is blocked

• Assets with comprehensive management

The devices listed in this Asset Manager dashboard widget are missing Trellix's ePO agent, which is required element in the customer's network. The end-customer would be unaware of these policy violations were it not for Asset Manager.

An important early step in conducting any census of managed assets is to validate IPAM tracking and allocation data. To that end, BlueCat and Infoblox have been integrated to Asset Manager. When you activate the Infoblox IPAM integration, Asset Manager queries Infoblox, correlates the query results against what Asset Manager "knows," generates responses, and pushes metadata about discovered devices to Infoblox. Infobox is one of several Asset Manager integrations that not only pulls data from the integrated application, but also pushes data to it.

The BlueCat Management dashboard enables you to identify any IP address space that is missing from your BlueCat Address Management (BAM) server.

The dashboard provides these device attributes:

• Active - True/False status indicating whether the device responded to a Asset Manager probe
• Device Type - Descriptor of the device such as server, router, printer
• DNS Name - Name given to device by Domain Name System
• First Observed - Timestamp of when the device first responded to a probe from Asset Manager
• IP Address - The unique IPv4 or IPv6 device identifier
• Last Observed - Timestamp of when the device last responded to a probe from Asset Manager
• LocationCode -  Indicates the country, city in UN/ LOCODE, and custom locations such as  CA TOR OF1 indicates: CA= Canada TOR=Toronto OF1=Office 1.
• MAC Address - The unique device identifier
• OS - Operating system running on the device
• State - Categorizes IP address assignment permanence (e.g., static, DHCP-reserved, gateway)
• Zonename - Name of the zone in which the device was discovered

Network management integrations ensure that the deployed networks you manage through a single browser interface all show up. When you enforce device security policies, deploy software and apps, and perform remote, live troubleshooting on managed devices, these integrations validate that you're handling all the devices in a zone in their entirety.

Meraki, a subsidiary of Cisco, is a web-based network management system. Customers purchase Meraki-brand routers, switches, firewalls and even cameras, deploy them on their network and then manage them via a website. This integration is another Asset Manager discovery technique. From Meraki, Asset Manager pulls router, switch and firewall information, including the interface tables of those devices, along with the MAC/IP addresses of all endpoints. This data augments Asset Manager device details for those devices and displays in Asset Manager analytics.

The responses from Meraki are used to enhance the interface information displayed in Asset Manager Device Details, including:

• Network - Including additional L3 switch data
• Devices - Additional information from Meraki has been added re MX* model security appliances 
• Interface - Including port information from Meraki
• Meraki source identifier called out in Asset Manager Device Details.

• Meraki inflected device fingerprints, identification, and confidence-rankings.

• Meraki sourced devices and CIDRs can be added to Asset Manager Target List and Asset Manager Eligible List.

Asset Manager breach-detection integrations find the activity of malware in your network. They identify which devices on your network have been compromised by known bad actors. When you connect a breach detection integration such as iDefense, Asset Manager correlates data from two sources: netflow data and real-time streams of data providing information on potential cyber threats and risks. Compromised network assets including their attributes are reported in Asset Manager.

Provides actionable lists of zombie devices and threat flows in your network by correlating a closed-source threat intelligence feed from iDefense IPs against your network's IPs. Asset Manager ingests a single source of netflow data or multiple sources that have first been bundled via a netflow aggregator such as Gigamon.

Asset Manager amplifies the value of a Risk Managers such as FireMon Security Manager. FireMon Security Manager can better assess risk, prioritize remediation, and minimize the attack surface of the networks it manages.

FireMon offers a complete end-to-end solution for device visibility, firewall clean-up, and compliance reporting using Asset Manager and Security Manager. Attributes of devices Asset Manager has profiled as being a unique router, Layer 3 switch, or firewall are pushed to Security Manager. Security Manager then compares these device records to those it manages already. A Security Manager administrator can apply rules, correct configuration issues, and make the Asset Manager discovered devices policy-compliant—all on the FireMon SIP platform.