Internal Vulnerability Management

iScan vulnerability management engine enables organizations to stay in complete control of their network security. Designed by security professionals for security professionals the iScan combines detailed analysis of network vulnerabilities with real-time intrusion detection feeds. The intuitive interface provides network and security managers with all the tools they need to ensure that their organization is both secure and compliant.

Appliance Based Vulnerability Scanning

The iScan is a non-intrusive and highly accurate deep-probe scanning engine delivered as a network appliance for scheduling, managing, and reporting vulnerabilities. The iScan feeds data into the iTrust security management platform, a highly intuitive user interface. The iTrust includes a graphical dashboard taking complex vulnerability scanning data and presenting it in a format that can be quickly and easily understood. When used in combination with the available TrustShield IDS the iTrust correlates data from the iScan providing a real-time view of critical vulnerabilities and current threats. This host centric approach provide an invaluable layer of security management intelligence, minimizing false positives, and enabling technical resources to focus on protecting mission critical assets. iScan also leverages advanced reporting techniques enabling customers to secure their networks and meet compliance reporting objectives.

Take Control

iScan enables the network and security team to initiate an unlimited number of vulnerability scans, either scheduled or on-demand, and delivers real-time event correlation across the enterprise. iScan enables IT security managers to take control of security testing and, The iScan includes a wide range of detailed reports that can saved as PDF's, HTML, or XML which can easily be imported into reporting applications and Excel. The iTrust dashboard is highly intuitive and enables IT personnel with minimal security knowledge to run security checks against critical network assets. This reduces overreliance on the security manager and providing organizations with a way to embed security into everyday IT processes such as change control management.

Report Generator

iScan enables IT security managers to easily produce a wide variety of both detailed and summary reports. The report generator saves time in formatting raw vulnerability reports and provides a simple and effective way to present security information to non-technical management. Technical reports include detailed analysis of the issue and detailed remediation guidance including issue-specific links to Bugtraq, OSVDB (Open Source Vulnerability Database), CVE (Common Vulnerability and Exposures database) and CVSS (Common Vulnerability Scoring System).

Enterprise Scalability

The iScan is enterprise ready for large distributed environments. Using strategically placed scanners throughout the network, the iScan reduces network scan traffic, saves time and also allows the entire network to be mapped and monitored from a centralized location. Leveraging the embedded iTrust interface the iScan can run scheduled and on-demand vulnerability assessments and present the results in real time.

iScan Internal Vulnerability Management Features

Security Event Management: Includes a single dashboard view of all alerts. Alert detail includes color-coded severity ratings, attack sources, attack targets, time, and date stamp. Users can specify actions such as Dismiss and Escalation to another iTrust user or external email address. Alerts can also be dismissed en masse.

Dashboard Management: Easy to use single view dashboard with data filtering by date, location, and device. Dashboard features a quick view of alert and connection status for all devices. The trending dashboard includes interactive graphic with alerts by volume, target, and attack sources.

Reporting: Easy to understand graphical formats in HTML, PDF, and XML formats. Choose from a selection of standardized reports or create your own using the dynamic report generator. Each issue is color coded and ranked based on severity.

Remediation Guidance: Reports include detailed step-by-step remediation guidance and one-click links to external resources for additional patching information and workarounds. These solutions have been tested and validated by TrustNet's experienced security team who are on-standby with unlimited technical support.

Targeting Scanning: Scan your targets individually or by group. Uses our predefined groups or create an unlimited number of your own for example by location, business unit, subnet, department, and risk level.

Scheduling: Run your scans immediately or on a daily, weekly, or monthly schedule. Specify your schedule by the specific day of the week and hour. Temporarily "pause" any schedule whenever needed.

Role Based Permissions: Enterprise-grade role-based security that controls user access rights across all iTrust applications. Create unlimited number of hierarchical roles enabling delegation of responsibilities to reflect your unique organizational structure. Specify specific actions for each role (for example Schedule Scans, Add/Remove False Positives, Location Management) and authorized functional profile (for example Full Vulnerability Assessment, SANS Top 20, PCI Compliance Check).