by Carole Fennelly
November 2, 2022
New digital platforms and development shifts have rapidly moved from concept to capability. Tracking updates for the constantly changing landscape of assets is important to identify legacy code and asset footprint. This dashboard focuses on legacy patches and assets to reduce management effort and reactive firefighting. Organizations can identify parts of their network that have been missed by patching cycles, or where traditional mitigation methods no longer apply.
The rapid expansion of assets makes it critical to maintain continuous visibility to identify outdated technology and unpatched vulnerabilities. This dashboard provides a clear snapshot of which assets are unsupported or unpatched.
As assets age, security managers need to update security procedures to stay ahead of legacy threats. Unpatched assets expose organizations to vulnerabilities that are actively being exploited. End of life assets may pose the greatest risk since they are unsupported and no longer receiving security updates or support from the vendor.
Security leaders need to SEE everything, PREDICT what matters most and ACT to address cyber risk and effectively align cybersecurity initiatives with business objectives. Tenable.io discovers and analyzes assets continuously to provide an accurate and unified view of an organization’s security posture. The requirements for this dashboard are: Tenable.io Vulnerability Management (Nessus, NNM).
Widgets
Outstanding Remediations - Time since Patch Publication: This widget displays the total count of missing patches across the environment. The matrix is comprised of five columns. The first column provides a count of the vulnerabilities that are exploitable, and the last four columns provide counts of vulnerabilities based on severity levels. Each row filters the vulnerabilities based on the patch publication date of less than 30 days ago, 31-90 days, 91-180 days, and greater than 181 days. The requirements for this widget are: Tenable.io Vulnerability Management (Nessus, NNM).
Outstanding Microsoft Remediations - Time since Patch Publication: This widget displays the total count of missing patches related to Microsoft Security Bulletins using the Windows: Microsoft Bulletins and Windows plugin families. The matrix is comprised of five columns. The first column provides a count of the vulnerabilities that are exploitable, and the last four columns provide counts of vulnerabilities based on severity levels. Each row filters the vulnerabilities based on the patch publication date of less than 30 days ago, 31-90 days, 91-180 days, and greater than 181 days. The requirements for this widget are: Tenable.io Vulnerability Management (Nessus, NNM).
Outstanding Remediations By Device Type: This widget displays the total count of missing patches by device type. The matrix is comprised of five columns. The first column provides a count of the vulnerabilities that are exploitable, and the last four columns provide counts of vulnerabilities by severity based on device type using plugin family filters. The requirements for this widget are: Tenable.io Vulnerability Management (Nessus, NNM).
End of Life Software Detection: This widget displays a list of software that is no longer supported by the vendor. The table is sorted by the count column, which lists a count of the total number of assets affected by the unsupported software package. The filter used is for Plugin Name equals Unsupported. Tenable recommends that assets found here be upgraded to a higher supported version as soon as possible, since vendors no longer list active vulnerabilities for end-of-life software. The requirements for this widget are: Tenable.io Vulnerability Management (Nessus, NNM).