Known Assets Monitoring - User Guide - 1.0 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse User Guide

Product
Cortex XPANSE
Version
1.0
Creation date
2022-08-25
Last date published
2024-03-14
End_of_Life
EoL
Category
User Guide
Abstract

Cortex Xpanse performs targeted daily scans of known assets for customers who opt in.

Cortex Xpanse performs global scans twice a week by default. For customers who opt in, Cortex Xpanse performs targeted scanning of known assets daily. Known Assets Monitoring (KAM) brings three significant benefits to the data delivered by Cortex Xpanse:

  • Additional ports and protocols

    • Port/protocol pairs not included in global scans, including port 25/SMTP, 500/UDP

    • SMB version enumeration

  • TLS/SSL scanning

    • Determination of supported cipher suites and protocol versions for TLS/SSL services

  • Frequent scanning and data delivery

    • Faster data delivery for reduced time to notification of new exposures