Managing assets
In the Assets section of the KUMA web interface, you can view and edit information about known assets and their categories. Devices can be imported from Kaspersky Security Center.
The asset categories tree is displayed in the left part of the Assets section. You can browse the tree, and expand or collapse nodes. When a node is selected, the assets belonging to that tree node category are displayed in the right part of the window.
When you select an asset, the Asset details pane displaying the asset parameters opens on the right side of the window:
- Name—the name of the asset. Assets imported from Kaspersky Security Center retain their Kaspersky Security Center names.
- Tenant name—name of the tenant that owns the asset.
- Created—the date and time when the asset was added to KUMA.
- Updated—the date and time when the asset information was modified.
- Owner—the owner of the asset, if provided.
- IP address—IP address of the asset, if provided.
If in KUMA there are several assets with identical IP address, the asset that was added later is returned in all cases where assets are searched by IP address. If assets with identical IP addresses can exist in your organization's network, plan accordingly and use additional attributes to identify assets. For example, this may become important during correlation.
- FQDN—Fully Qualified Domain Name of the asset, if provided.
- MAC address—MAC address of the asset, if provided.
- Operating system—operation system of the asset.
- Related alerts—alerts associated with the asset (if any).
You can see the list of the alerts that the asset is related to by clicking the Find in Alerts link. After that the Alerts tab opens with the search expression set to filter all alerts with the identifier of asset.
- Categories—categories associated with the asset (if any).
- Vulnerabilities—vulnerabilities of the asset, if provided. This information is available only for the assets, imported from Kaspersky Security Center.
You can learn more about the vulnerability by clicking the
icon, which opens the Kaspersky Threats portal. You can also update the vulnerabilities list by clicking the Update link and requesting updated information from Kaspersky Security Center. - Software info—if the asset software parameters are provided, they are displayed in this section.
- Hardware info—if the asset hardware parameters are provided, they are displayed in this section.
- Agent ID—identifier of network agent of the asset, if provided.
- Last connection time with KSC—if the asset was imported from Kaspersky Security Center, this section displays the time of the last connection with Kaspersky Security Center.
You can select check boxes near assets and then assign them to a category using the Link to category button.
Do not link assets to the Categorized assets category.