FireMon Cloud Defense Dashboard

Security Group Risk Summary

Security Group Risk is the number of policy violations associated to an instance that could make the instance vulnerable to network attacks.

Asset Manager considers the following factors in calculating the Security Group violation:

• Wildcard in a Security Group.
• IPv4 mask is too large for a Security Group.
• Src/Dest checks disabled on an instance
• Inbound/outbound path to the public internet (direct and indirect)

Instance Inventory

Asset Manager will display AWS Instance Information including Instance ID, Public MAC Address, Public IP, VPC ID, Security Group IDs and Region.  All this information can be configured into reports; combing you cloud instance information with your on-prem devices.