Continuous Asset Discovery

The Challenge

In addition to the impacts expired certificates would have on the organization such as outages and reputational damage, without a true understanding of what assets lived within their infrastructure, the company was concerned about their security posture due to underpopulation of information in existing vulnerability scanner, IPAM, and SIEM security solutions.

The company sought to:

• Eliminate 100% of infrastructure blind spots
• Gain real-time global network visibility and a complete view of all assets across their multi-vendor environment
• Enrich existing vulnerability management, IPAM, and SIEM solutions which lacked records for hundreds of thousands of devices

The Solution

FireMon Asset Manager enabled real-time discovery and visibility of thousands of previously undetected assets across the organization’s sprawling, multivendor global infrastructure, greatly increasing the company’s security posture.

• Real-time L2 and L3 device detection across on-premises networks and cloud environments
• Lightweight, non-invasive endpoint discovery for cloud, virtual, physical, SDN, operational technology (OT), and internet of things (IoT) devices
• Automatic device profiling and identification with the ability to group and highlight devices by attributes, types, OS, or vendor
• Full network dynamic discovery to supplement existing security tools
• Real-time anomaly detection

Results

• 1.2 million IP spaces scanned daily
• Identified 300,000+ previously unknown devices
• Reduced risk by eliminating infrastructure blind spots