Security settings of a device or a device group

The BCM agent can also compile a security inventory of any remote client (with the exception of Mac devices) for inspection by the administrator. This is based on the execution of operational rule steps.

The Security Settings Inventory list is an .xml file which is compiled by the steps and then is uploaded to the master. The update and upload of the security inventory file is based on a number of parameters which are set in its configuration file, SecurityInventory.ini.

The Security Settings Inventory node of the console displays a list of all security objects which are verified and collected through the operational rule steps on the remote device. Contrary to the hardware and software inventory the security inventory is generated via operational rule steps and their schedule. Any available inventory data is uploaded to the master once a day by default if not specified differently by a rule step. As with the other inventory information, all entries are stored in the database to be available even if the actual device is off-line. By default the security inventory is empty.

Security settings inventory objects

Like hardware and software objects, security inventory objects can have one or several instances and attributes providing further information. These objects are dependent on the security object itself. Below you can see the example for the list of open ports discovered for a device.

Security settings inventory group Members

The security inventory display the information about all listed items according to their properties.

Security Settings Inventory of group members

The Inventory tab lists all attributes of the selected security object and the respective count for the members of the group. The information displays in tabular format and provides the following information: