Asset Inventory and Asset Type List Views - User Guide - 1.0 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse User Guide

Product
Cortex XPANSE
Version
1.0
Creation date
2022-08-25
Last date published
2024-03-14
End_of_Life
EoL
Category
User Guide
Abstract

Cortex Xpanse provides a complete asset inventory as well as asset list views organized by asset type.

Cortex Xpanse provides a complete inventory of the discoverable assets for your organization, as well as separate list views for each asset type. The Inventory and asset type list views are organized on tabs under Assets, as shown in the figure below.

asset-inventory.png

The following list provides a description of each tab under Assets:

  • Inventory—Displays a comprehensive list of your assets along with key data about each asset, enabling you to search, sort, and filter your entire asset list from one interface.

  • IP Ranges—Displays all IP addresses, in the form of ranges, that Cortex Xpanse has attributed to your organization. For more details on IP Ranges, see IP Registration Records.

  • Domains—Displays all domains that Cortex Xpanse has attributed to your organization and whether Cortex Xpanse has a recent resolution for each domain. This includes whether the resolution is associated with an active Service. If you have integrated cloud accounts, this tab will show you which domains have associated managed cloud resources. For more details on domains, see Domains.

  • Certificates—Displays all certificates that Cortex Xpanse has attributed to your organization and whether Cortex Xpanse has seen each certificate advertised recently. This includes whether the advertisement is associated with an active Service. If you have integrated cloud accounts, this tab will show you which certificates have associated managed cloud resources. For more details on certificates, see Certificates.

  • Remote Attack Surface—Provides an inventory of your Workforce Networks and Workforce Devices. The Remote Attack Surface asset tab is available only to customers who have API integration between Cortex Xpanse and Cortex XDR or GlobalProtect™. For more information about Remote Attack Surface management, see Remote Attack Surface Overview.

    • Workforce Networks—A network is a collection of devices that share a single public IP address. The Workforce Networks tab displays a complete list of the networks that your Workforce Devices appear on.

    • Workforce Devices—Displays a complete inventory of all your remote workforce devices with Cortex XDR installed.

  • Cloud Resources—Displays an inventory of assets Cortex Xpanse was able to identify for your organization based on assets in known and sanctioned cloud accounts. For more information on Managed Cloud Resources, see Cloud Service Provider Integration.