Understanding the Dashboard

Site header

The site header appears on every page and provides access to key Fortra VM features.

1. Business Group

   Fortra VM filters data and access based on the selected business group. You can create business groups that meet your organization's needs and switch between them from the header. For information about configuring business groups, see Business Groups.

2. Region

   Displays the region currently associated with your Fortra VM product.

3. Notifications

   Select the bell icon to view notifications. A number indicates the amount of unread notifications. To manage notification preferences, including email notifications, see Notifications.

4. User Menu

   Select the user menu to access My profile, Manage Notifications, Change Password, Hide help, Report an issue, and Sign out.

Navigation menu

The navigation menu appears on every page and provides access to Fortra VM tools and features. Select an item to expand it and view additional options.

Network summary

The Network Summary panel provides an overview of your network's security posture. Select an item to view the filtered data used to calculate the displayed value.

Fortra VM Network Summary components

1. Internal Security GPA

   The weighted average of evaluated assets that are vulnerable to internal attacks.

2. External Security GPA
   

   The weighted average of evaluated assets that are vulnerable to external attacks.

3. Assets

   The number of evaluated assets identified in Fortra VM.

4. Vulnerabilities

   The number of vulnerabilities discovered in your environment.

5. Malware Infections

   The number of new malware infections identified during the most recent scan.

6. Most Recent Scan

   The time elapsed since the most recent scan completed.

7. New Scanner Checks

   The number of consolidated vulnerability checks (CVCs) recently added to the scanner.

8. Average Threat Rank

   The average Threat Rank of vulnerabilities detected on your network. For more information, see Threat Rank.

9. Average Active Risk Score

   The average Active Risk Score of rated assets and vulnerabilities. For more information, see Active Risk Scores rate assets and vulnerabilities based on client-selected risk profiles to define actual risk exposure. .

WAS Network Summary components

1. Security GPA

   The weighted average of evaluated web applications that are vulnerable to attacks.

2. Web Apps

   The number of evaluated web apps.

3. Vulnerabilities

   The number of vulnerabilities discovered in your environment.

4. Most Recent Scan

   The time elapsed since the most recent scan completed.

5. New Scanner Checks

   The number of consolidated vulnerability checks (CVCs) recently added to the scanner.

6. Allotted Web Apps

   The number of web applications currently used from your subscription allocation.

The At a Glance dashboard includes graphs that show vulnerability age and remediation-time trends. By default, only selected trend lines appear to highlight specific trends. Cloud statistics are also included in these graphs.

Security GPA trend graphs distinguish between Security GPA calculated from unauthenticated vulnerabilities and Security GPA calculated from all vulnerabilities. This distinction also appears in PDF reports.

Trending Security GPA

The Trending Security GPA panel shows changes to your Security GPA over time.

1. Your Security GPA before the most recent scan.

2. The Security GPA after the most recent scan.

3. Data sets shown as lines on the graph. Select a data-set label to show or hide it.

   NOTE: Cloud GPA is an anonymous aggregate of customer data that you can use to compare your Security GPA with other organizations.

4. The graph shows Security GPA trends over the past year and how changes in your environment affect the overall score.

   TIP: Hover over a data point to view the Security GPA for that point in time.

The Rated Vulnerability Distribution panel shows how vulnerabilities in your environment are distributed by severity.

1. The number of vulnerabilities detected before the most recent scan.

2. The number of vulnerabilities detected after the most recent scan.

3. Vulnerabilities grouped by severity:

   1. Critical — Allows full system access and is easily exploitable.

   2. High — Allows full system access but is not easily exploitable.

   3. Medium — Allows some system access and partial control.

   4. Low — Does not allow substantial system access but involved some information exposure.

   5. Trivial — Tied to minor vulnerabilities but is not useful to an attacker.

   TIP: Hover over or select a severity bar to view more information about vulnerabilities at that severity level.

The Assets At Risk panel shows he five most vulnerable assets and lets you sort them by Severity or Threat Rank.

1. Asset's Security GPA.

2. Asset Name — Select to view vulnerabilities found on this asset.

3. Vulnerability severity distribution.

   TIP: Hover over the severity graph to view details such as the number of medium-severity vulnerabilities detected on the asset.

4. Asset IP address.

5. Asset status icons — Hover over an icon to view its description.

6. Asset operating system and type.

For WAS, the At-Risk Applications panel shows the five most vulnerable web applications.

1. Web application Security GPA.

2. Web application name - Select the name to view vulnerabilities detected on the application.

3. Vulnerability severity distribution.

4. Web application status.

The Vulnerabilities You Should Fix panel shows vulnerabilities that require the most attention. You can sort the list by Severity or Threat Rank.

1. Vulnerability class and severity level:

   1. Explicit

   2. Potential

   3. Recon

   4. Compliance

   5. Malware

2. Vulnerability description

3. Vulnerability instance on your environment

For more information, see What are vulnerability classes and severities?.

Recent Scanner Releases

The Recent Scanner Releases panel provides information about Network Scanner or WAS Scanner releases, including release notes and new checks. New checks link to Support > Vuln Dictionary.

Recent Fortra VM Releases

The Recent Releases panel provides information about Fortra VM releases, including release notes.