Remote Attack Surface Dashboard

The Cortex® Xpanse™ Remote Attack Surface dashboard provides a consolidated view of your remote worker attack surface.
The Cortex® Xpanse™ Remote Attack Surface dashboard provides a consolidated view of your remote worker attack surface, with the ability to drill down into the details of the issues, services, devices, and networks that make up your remote attack surface.
The Cortex® Xpanse™ Remote Attack Surface dashboard is available to customers who have the API integration between Cortex Xpanse and Cortex® XDR™. For information about configuring the Cortex XDR API connector see Generate an API Key in Cortex XDR and Configure the Xpanse XDR API Connector.
At the top of the Remote Attack Surface dashboard page are the dashboard filters, the Share Dashboard button, and Last Updated date.
  • Use the dropdown filters to filter the data in the Remote Attack Surface dashboard.
  • Click
    Share Dashboard
    to copy the link to the dashboard, including your current filter settings, to your clipboard.
  • Last Updated
    provides the date of the most recent refresh for the dashboard data. Changes to data may take 24 hours to appear in the dashboard.
The Remote Attack Surface dashboard contains the following widgets:
  • Total Workforce Networks
    Displays the number of Workforce Networks, as well as a breakdown of Corporate and Remote Networks.
    • Click the Total Networks count to display the complete list of your networks.
    • Click the Remote or Corporate counts to display the network list with the remote or corporate network type filter applied.
    • Click
      All Workforce Networks
      to display the list of all your networks.
  • Total Workforce Devices
    Displays the overall number of your Workforce Devices, as well as a breakdown of workforce devices on your Remote and Corporate Networks. The change in the Total Workforce Devices count in the last 30 days is displayed next to the overall count. The graph displays the overall Total Workforce Device trend over time.
    • Click the Total Workforce Devices count to display a complete list of your workforce devices.
    • Mouse over the graph to display the Workforce Device count for a specific date.
    • Click the Remote Network or Corporate Network device counts to display the device list with the Remote Network or Corporate Network filter applied.
    • Click
      All Workforce Devices
      to display the complete list of your Workforce Devices.
  • Total Active Issues
    Displays the number of active issues on your workforce networks, as well as a list of the top 5 issue types. The change in the Total Active Issues count in the last 30 days is displayed next to the overall count. The graph displays the trend in Active Network Issues on your workforce networks over time.
    • Mouse over the graph to display the number of Active Issues on your workforce networks on a specific date.
    • Click the Active Issues counts for the Top Issue Types to display the Issues list with the Issue Type filter applied.
    • Click
      All Active Issues
      to display the complete list of Active Issues on your workforce networks.
  • Total Active Services
    Displays the total number of active services running on your workforce networks, as well as a list of the top 5 Service Classifications.
    The change in the Total Active Services count in the last 30 days is displayed next to the overall count. The graph displays the trend in Active Services on your workforce networks over time.
    • Click in the graph to display the number of Active Services on your workforce networks on a specific day.
    • Click the Total Active Services count to display the complete list of Issues on your workforce networks.
    • Click
      All Active Issues
      to display the complete list of Active Issues on your workforce networks.
  • Remote Attack Surface Map
    Displays a map view of the locations of your Corporate and Remote Networks.
    • Mouse over a location to see the number of Corporate and Remote Networks.
  • Workforce Issues by Severity
    Displays the number Workforce Issues broken down by severity.
    • Click the Issue counts to display the Workforce Issues list filtered by Critical and High, Medium, or Low severity.
  • Top Networks with Critical and High Issues
    Displays the eight networks with highest number of critical and high issues. For each network, the network IP, the number of critical and high issues, and the number of critical and high issues over the last seven days is displayed.
    • Click the
      Network Public IP
      to display the Network details page for that network.
    • Click the issue count to display the Issues list filtered by the Network Public IP and a critical or high severity.
    • Click
      All Networks with Critical/High Issues
      to display the Issues list filtered by Workforce Networks and critical and high severity.
  • Open Issues Progress
    Displays the number of Acceptable Risk, No Risk, and Resolved issues for the top 10 Issue types for your workforce devices.
    • Click in the bar graph to display the list of Workforce Issues with the relevant Issue Type and Progress filters applied.
    • Click
      Open Issues In Progress
      to display the list of Workforce Issues with the
      In Progress
      filter applied.

Recommended For You