Threat & Vulnerability Management

Request from customer - CBIC is to setup two Nessus API Servers in MS application. They raised this request as they are using two Nessus configuration from different locations. Is this request can be implemented? Is it in roadmap?

Request from customer - CBIC : Do we have plans/in roadmap, an integration with HPAM tool for Asset Synchronization?

Do we have plans/in roadmap of integration of MetricStream tool with other tools (such as HP Asset Manager{HP AM}, HP ArcSight, HP Service Manager, HP WebInspect, Antivirus, HIDS, APT, IPS, Micro Focus Universal Configuration Management Database (...

While fetching the GRCF data from CMDB using integration, a Rule engine can be implement that will help us in configuring the Organization specific rules around assets(CIA values or other attributes). For ex: Bank ABC have a requirement that all d...

In October 2015, Intel announced the end of life (EOL) for McAfee Vulnerability Manager, a web application scanner, with the end-of-sale date in January 2016 . Instead of directly participating in the vulnerability management segment, McAfee has p...

we need the feature to create single issue for tracking same vulnerabilities. For example if the identified vulnerability affects more than one asset (Server), we need the ability to create single issue to track the patching remediation for all th...

Microsoft SCCM is often used as a CMDB within IT organizations. It adds value to import the Asset inventory from SCCM into MetricStream Asset Library.

For an Asset - Vulnerability pair in scan n for which the Vulnerability is not detected in scan n+1 any ticket that was triggered for this Asset - Vulnerability pair should be closed automatically. There should be a configuration to enable or disa...

In Customer scenarios where an API-connection into a Vulnerability Scanner is not possible or where vulnerability scan results already exist via. business workflows and in the form of a flat-file (CSV or XLS) it adds value to ingest this data into...

SABB has no asset/CMDB like Atrium. They want the Nexpose connector to create Asset/Asset-Class GRC library from the vulnerability information itself. Creating asset from Nexpose feed through ETL and business criticality to be governed by fields ...