An asset management technology that enables a complete IT infrastructure inventory and the tracking of its state
/products/mpsiem/MaxPatrol SIEM
/products/mp-vm/MaxPatrol VM
Asset management
Overview
To solve information security tasks, such as aggregating data from different sources, correlating events and managing incidents, checking device compliance with security policies, tracking vulnerabilities, and assessing risks, it is necessary to maintain an up-to-date asset database.
An asset is an element of the IT infrastructure connected to the network (such as a server, computer, or network equipment).
Maintaining up-to-date information about infrastructure is challenging
Consequences of lacking asset information
Asset management technology
The patented asset management technology developed by Positive Technologies automatically finds and identifies all devices on the network, and verifies their data. It takes into account the type of asset and the results of the checks, ensuring a full and accurate inventory without missing a single device.
Asset management capabilities
Automatically identifies assets
It collects information about more than 3,000 asset parameters (including FQDN, MAC and IP addresses, OS types, network node names, and node virtualization signs). When IP or MAC addresses change, the asset is not duplicated; instead, knowledge about it continues to be collected in one record.
Tracks infrastructure changes
It monitors appearance of new network nodes and services, OS reinstallations, and hardware configuration changes, and performs integrity checks. This helps avoid missing important infrastructure changes and improves system security.
Controls the completeness of asset data
It imports asset data from external systems. It also controls assets with incomplete information, as well as recently discovered and potentially removed assets.
Enables asset prioritization by importance
It considers the importance of assets for business processes, their impact on data confidentiality and integrity, uptime, and other factors.
How it works
Asset audit guide
The asset management system analyzes the attributes of each device, comparing them with the attributes of previously known assets. Based on this comparison, the following is determined:
- If this is a new device → a record is created.
- If it is an existing device → the data is updated.
Key parameters for comparison:
- OS type and identifiers
- Unique keys of virtual machines
- Physical and virtual nodes
- System identifiers
- Node names (hostname, FQDN*)
- Real MAC addresses
- Current IP addresses
- Hardware serial numbers
*The FQDN is determined directly on the node during auditing, which ensures data accuracy regardless of external factors.
Asset management in Positive Technologies products
MaxPatrol VM
Helps build a vulnerability management process.
Asset management technology provides security specialists with up-to-date information about the IT infrastructure security. This allows specialists to assess the network components' importance to business processes across all systems and to remediate the most dangerous vulnerabilities in a timely manner.
MaxPatrol VM separates asset information collection from vulnerability identification. The system stores the results of previous scans, so the information about asset state always remains current. This helps avoid missing important vulnerabilities on assets without having to wait for scheduled scans.
MaxPatrol VM dashboards show the most vulnerable assets and highlight the relevance of the asset data.
MaxPatrol SIEM
Helps control the completeness and quality of security event collection.
Using asset management technology, MaxPatrol SIEM users can identify source unavailability, anomalies in event flow distribution, and delays in receiving events from sources to ensure a timely response.
Thinking about the best way to protect your company?
Contact us.
During the consultation we'll propose a solution precisely tailored to your organization.