Vulnerability Scanning for Compliance
Topics Discussed
To fully use this screen, you must add the following permissions to your account:
Read Compliance
Write Compliance
Use the Vulnerability Scanning add-on product to meet compliance requirements and review potential issues discovered by the scans.
You can order the following add-on products:
Navis HIPAA Vulnerability Scans
Navis PCI Vulnerability Scans
Navis PCI + HIPAA Vulnerability Scans
After you order the Vulnerability Scanning add-on product, you can use the Vulnerability Scanning screen in the Armor Management Portal (AMP) to:
View the status of the vulnerability scan
Upgrade or downgrade your service
Access the CoalfireOne portal to schedule a scan
Order Vulnerability Scanning
In the Armor Management Portal (AMP), in the left-side navigation, click Marketplace.
Locate and select Coalfire Vulnerability Scanning.
Locate the desired add-on product, and then select Choose This.
Click Purchase.
A ticket will be automatically created and sent to Armor Support. To see the status of this ticket, in the left-side navigation, click Support, and then click Tickets. Armor will use this ticket to communicate with you about the status of your order and to inquire about your specific configuration requests.
When the product has been fully provisioned, you can view the Vulnerability Scanning screen in AMP for detailed information.
Upgrade, Downgrade, or Cancel A Vulnerability Scanning Option
When you downgrade or cancel a vulnerability scanning option, the changes will take place at the end of the billing cycle.
When you upgrade, the changes will take place immediately. Your next bill will be pro-rated to reflect this upgrade.
CoalfireOne portal access will revert to read-only after cancelling Vulnerability Scanning for Compliance. Read-only access will allow users to download past reports. It is recommended that users download past reports immediately, as the data is not retained indefinitely.
Prior to cancelling, it is recommended that users cancel scheduled scans. Canceling scans prevents users from getting unnecessary notifications.
In the Armor Management Portal (AMP), in the left-side navigation, click Security.
Click Vulnerability Scanning.
Click Compliance.
If you do not have the vulnerability scanning add-on product, then click Order in the Marketplace.
Click the gear icon, and then select the desired option:
To upgrade or downgrade, select the Change Service icon, click Choose This, and then click Purchase.
To delete, select the Remove Service icon, and then click Remove Vulnerability Scanning.
Access CoalfireOne Portal and Schedule A Scan
You must use the CoalfireOne portal to schedule a scan.
After you purchase an add-on product, you will receive an email with login information for Coalfire. Open the email, and then copy the login information. You will need this information to enter the Navis Portal.
In the Armor Management Portal (AMP), in the left-side navigation, click Security.
Click Vulnerability Scanning.
Click Compliance.
Click Log into Navis Portal.
Use the login information from the email to access the Navis Portal.
Under Projects, click the applicable project name (you will have three different projects, and some/all will be active depending on which offering you are subscribed to).
In the selected project, click the Setup menu item.
Above the list of previously-scheduled scans, click the Add button.
Under the Scan Details tab, complete the empty fields, including Name and Frequency.
Click the Targets tab.
Above the list of previously-added targets, click the Add Existing Target button.
Mark the desired IP addresses, and then click Add.
Click the Save button.
Resyncing Scan Targets Between AMP and Coalfire
As you assign or unassign IP addresses to your virtual machines, those which remain assigned are made available within the Coalfire Navis portal as potential scan targets. Normally, such changes are immediately available within Coalfire, but this can occasionally fail. In the event you are missing scan targets, you can attempt to remediate this by performing a manual synchronization between AMP and Coalfire:
In the Armor Management Portal (AMP), in the left-side navigation, click Security.
Click Vulnerability Scanning.
Click Compliance.
Click the gear icon, and then select Resync Targets (this option is only displayed if there is at least one unsynced scan target)
If you attempt the above steps yet still have issues with scan targets appearing missing within Coalfire, please create a ticket with Armor Support for additional assistance.
Learn More About CoalfireOne
The CoalfireOne platform is Coalfire's newest offering, which incorporates several improvements to their current scanning & assessment experience. To learn more about how to use those new functions, please watch the training videos available on our CoalfireOne Portal Training page.