Asset Groups
  • 8 Minutes to read
  • PDF

Asset Groups

  • PDF

Introduction


This page displays a list of all asset groups along with their SAFE score, group type, priority, asset count, and owner. It allows admin users to create and manage Smart Asset Group (Smart Group) and Static Asset Group.

Asset Group

Smart Group


Managing Asset Groups manually in the dynamically changing IT environment is time-consuming and needs human intervention whenever a new asset is added or deleted. This feature of SAFE automates Asset Group management, with this SAFE automatically adds/manages assets in the asset groups based on predefined criteria such as location, criticality, agent type, technology, region, applicability, and many more. Users can create multiple criteria for a Smart Group.

Create Smart Group


To create a Smart Group:

  1. Navigate to Technology > Asset Groups.
  2. Click the Create Asset Group button.
  3. Enter the Group Name.
  4. Select Group Access as Public or Private from the drop-down. Upon selecting Public - all SAFE users can see the asset group, and Private - only the user who created the asset group can see the group.
  5. Group Priority: The Group Priority field is used to determine which Control Policywill be applied to the assets in an Asset Group when it contains assets that are part of more than one Asset Group.
    Note
    It is only necessary to modify this field if you are using Control Policies and are creating multiple Smart Groups to which a single asset belongs. The system applies the Group Priority to all the assets in that Smart Group. If an asset falls into multiple asset groups, the group's policy with the highest priority number will take precedence.
  6. Select  criteria for the asset group as follows: 
    1.  Select a field value for the Criteria drop-down. The criteria such as agent activation key, agent type, agent version, asset type, cloud account, custom fields, and many more are available in the drop-down list.
    2. Select a condition from the drop-down. The conditions changes based on the value selected in the criteria field. Example: For criteria Agent Type - condition value is IN or NOT IN, for criteria Smart List - condition value is EQUALS.
    3. Select or enter the value for selected criteria and conditions.
  7. You can add multiple criteria by clicking the plus icon.
  8. Select the Match All or Match Anyoption as per your requirement.
    1. Match All: Upon selecting the Match All option, the system adds the assets to the asset group if the assets fall under each of the selected criteria.
    2. Match Any: Upon selecting the Match Any option, the system adds the assets to the asset group if the assets fall under any of the selected criteria.
  9. Make sure the Smart Group button is enabled.
  10. All the assets with matching criteria will be listed at the bottom of the page. You need to click the expand icon to view the list.
  11. Click the Create Group button. The Smart Group will be created.

Asset Grouping match All n match any

Note
The system does not allow you to create asset groups; if five asset groups are in queue for membership evaluation triggered due to creating/updating the asset groups.

Create a Non-Smart Asset Group (Static Asset Group)


To create the Asset Group:

  1. Navigate to Technology > Asset Groups.
  2. Click the Create Asset Group button.
  3. Enter the Group Name.
  4. Select Group Access as Public or Private from the drop-down. Upon selecting Public - all SAFE users can see the asset group, and Private - only the user who created the asset group can see the group.
  5. Select a value for Group Priority. The system automatically populates a value in the Group Priority field; however, you can change it either directly by entering a value in the field or using the up-down arrow button. The Group Priority that you select is automatically applied to all the assets in the smart asset group. If the asset falls into multiple groups, the policy of the group with the highest priority will take precedence.
  6. Select criteria for the asset group as follows: 
    1.  Select a field value for the Criteria drop-down. The criteria such as agent activation key, agent type, agent version, asset type, cloud account, custom fields, and many more are available in the drop-down list.
    2. Select a condition from the drop-down. The conditions changes based on the value selected in the criteria field. Example: For criteria Agent Type - condition value is IN or NOT IN, for criteria Smart List - condition value is EQUALS.
    3. Select or enter the value for selected criteria and conditions.
  7. You can add multiple criteria by clicking the plus icon.
  8. Select the Match All or Match Anyoption as per your requirement.
    1. Match All: Upon selecting the Match All option, the system adds the assets to the asset group if the assets fall under each of the selected criteria.
    2. Match Any: Upon selecting the Match Any option, the system adds the assets to the asset group if the assets fall under any of the selected criteria.
  9. Disable the Smart Group button.
  10. All the assets with matching criteria will be listed at the bottom of the page. You need to click the expand icon to view the list.
  11. Now select the assets from the list by clicking the checkboxes available against their name
  12. Click the Create Group button. The Asset Group will be created.

Static Asset Group

Note
The system does not allow you to create asset groups; if five asset groups are in queue for membership evaluation triggered due to creating/updating the asset groups.

Delete Asset Group


To delete an Asset Group:

  1. Navigate to Technology > Asset Group
  2. Click the Delete icon available in the Manage column
  3. Click the Yes button on the confirmation screen.

Delete Asset Group

Edit Asset Group


To edit an Asset Group:

  1. Navigate to Technology > Asset Group
  2. Click the Edit icon available in the Manage column.
  3. Update the details.
  4. Click the Update Group button available at the bottom of the screen.

Edit Asset Group

View Asset Group Details  (SAFE Version 2.2.24) 


Clicking any of the asset groups from the asset groups list redirects users to the asset group details page. On the asset group details page, users can find the following information:

  • Asset Group SAFE Score Trend
  • Asset Group SAFE Score
  • Asset Group Details
  • Actionable Insights
  • Asset Score Distribution
  • Asset List

Asset Group SAFE Score trend

This section provides a timeline frame modeled over a continuous graph to present the historic trend of the Asset Group Score. SAFE provides four timeframe options 1Year, 3 Months, 1 Month, and 1 Week. You can change the time frame by hovering and selecting the other time frame option.

Asset Group Score 1

Asset Group SAFE Score

This section displays the current Asset Group SAFE Score and the total number of assets in the asset group.

Asset Group 2

Group Details

Clicking the Group Details displays the details such as group type (Smart or Static) and group criteria.
Group Details

Clicking the edit icon redirects you to the edit asset group page where you can update the asset group details.

Edit Group Details

Clicking the See More option displays the option details such as creation date, created by, last updated date, and last updated by. 

Asset Group Details See more

Actionable Insights

This section displays a prioritized view of Actionable Insights on the controls. The actionable insights table has the following capabilities:

  • Actionable Insights will now entail a list of up to 100 failing controls which are a combination of all High Impact Controls and Critical/High severity failing controls.
  • All the high-impact failing controls are listed at the top of the list and highlighted in the light-red color. The system also displays the number of failing High Impact Controls just above the table with an option to quickly filter the actionable insights table for displaying only the High Impact controls.
    HIC in Asset Groupo
  • You can customize the number of rows in the actionable insights table to 10, 25, 50, or 100 rows.
    AI- Rows per page
  • The actionable insights table also allows users to sort each table column as per the user’s need.
  • Users can filter the actionable insights table based on attributes such as control type, asset type, severity, and technology vertical.
    Filter AI  -Asset Group
  • Clicking on the impacted assets column of the actionable insights table displays a list of impacted assets with their details on a new page.

    Asset Group  -Asset List from AI

  • Users can download the actionable insights in the CSV format. The downloaded CSV includes the details such as priority, control id, control name, high impact, control type, asset name, asset score, asset owner, asset criticality, technology vertical, asset type, IP, port, and other details of the control. The system downloads two CSV files - Impacted Assets CSV and Controls CSV. The system downloads the filtered or searched results. In other words, if the CSV is downloaded after applying filters or search, then the downloaded CSV will have the filtered or the search data only.
    AI -Export CSV for Asset Group(1)

Asset Score Distribution

This section segregates all the assets in the asset group based on their SAFE Score in the range of 0-1, 1-2, 2-3, 3-4, and 4-5, and displays the number of assets falling in each range. Users can change the bar graph view to a table view by clicking the option available at the top-right corner of this section. 

The tabular view gives you information on this distribution across different verticals in this asset group

Users can export the asset score distribution in a CSV by clicking the export icon. 

Asset Distribution

Asset List

This section lists all the assets available in the asset group. The list includes asset name, score, confidence, last assessed date, asset type, technology vertical, criticality, and many more. 

The asset list table allows users to:

  • Customize columns: Users can customize the columns in the asset list tables as per their business requirements by clicking on the customize columns icon available at the right-top of the asset list section.

Asset List column customize

  • Apply Filters: Users can filter the asset list table by clicking the filter icon and selecting the options for attributes, operators, and values. Users can apply multiple filters by clicking the Plus icon.

Asset List Apply Filters

  • Access assets: The system allows users to start the assessment by clicking the Access button available in the last column of the asset list.
    Assess Assets - asset list
  • Navigate to the asset details: Clicking on any of the assets redirects you to the asset details page. You can also filter the asset list and export the list in CSV.
  • Customize the number of rows: You can customize the number of rows you wish to view on one page in the asset list table to 10, 25, 50, or 100 rows.
  • Download CSV: Users can download the asset list in the CSV format by clicking the export icon. 
    • The system downloads the filtered result of the asset list for an asset group. In other words, if the CSV is downloaded after applying filters, the download CSV will have the filtered data only. 
    • You will be able to download Asset Details (such as Asset Name, Owner, IP Address, Criticality, etc.) directly from the SAFE UI for up to 50K Assets.
      export asset list 
Important 
You can download controls associated with the assets using SAFE REST API - assetListWithControls. You can download CSV for all assets or assets for a particular vertical or asset group. You can also apply filters supported on the SAFE UI (such as Assets Types, Criticality, Score, etc. This API allows users to download the data in tranches of 2K assets in one go. You can download all the assets by running the API in the loop.



Was this article helpful?