Viewing Asset Information

Scenarios

On the Resource Manager page, you can view the asset name, type, and protection status. You can view assets on and off this cloud.

Prerequisites

• You have completed asset subscriptions. For details, see Configuring the Asset Subscription.
• You have purchased the SecMaster standard or professional edition.

Viewing Asset Information

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

4. In the navigation pane on the left, choose Resource Manager > Resource Manager.
   Figure 2 Resource Manager
   

5. (Optional) Complete the asset subscription first. If you have done this once, skip this step.

   SecMaster can synchronize only asset information in the workspace where asset subscription is enabled. If you enable asset subscription, SecMaster updates asset information within one minute.

   

   Only cloud assets can be subscribed to and synchronized. Subscribing to assets in a region to multiple workspaces is not recommended.

   1. On the Resource Manager page, click Asset Subscription in the upper right corner.
   2. On the pane sliding from the right, locate the target row and enable subscription.
   3. Click OK.

      If you enable asset subscription, SecMaster updates asset information within 5 to 10 minutes. If you use a paid edition, SecMaster automatically synchronizes the latest full asset information every day after 00:30.

      After asset subscription, you can click System Synchronize Assets on the Resource Manager page to synchronize asset information again. The basic edition allows you to synchronize assets one time per day, and the standard or professional edition allows you to synchronize assets 20 times per day. If you exceed this threshold, the system displays error message "Insufficient resource synchronization quota." In this case, synchronize assets again the next day.

6. On the displayed page, view the resource details. You can view resource information by resource type. For example, you can select the Servers tab to view details about servers you have. Table 1 lists the asset types that can be viewed by category.

   Table 1 Asset types that can be viewed

   Tab	Asset Description
   All Resources	On this tab, you can view all assets, including cloud and on-premises assets.
   Cloud Resources	On this tab, you can view all your assets on the cloud, including servers, protected websites, networks, and data assets on the cloud.
   Servers	This tab displays information about cloud and on-premises servers. Servers: such as ECSs AI components: A company may have hundreds, or even thousands of servers running in its IT environment. The information about the ports, accounts, software, and other assets on the servers often change due to O&M operations, making it difficult for O&M personnel to track them in real time. Unmonitored assets and security blind spots may be exploited by attackers and incur risks. HSS server fingerprint management collects important asset information on servers, including their accounts, open ports, processes, AI components, software, auto-started items, web applications, web services, web frameworks, websites, middleware, kernel modules, and databases, to help you learn the asset status of each server, improve O&M efficiency, and eliminate security blind spots. Generative AI components on servers are called AI components, including AI applications and tools. AI application information: server name and IP address, application version, process ID, startup path, parent process ID, running user, listening information, startup time, startup command line, first scan time, and latest scan time AI tool information: server name and IP address, tool version, installation path, first scan time, and last scan time
   Websites	This tab displays cloud and on-premises website assets. For example, Web Application Firewall (WAF).
   Network Resources	This tab displays cloud and on-premises network assets. For example, Virtual Private Cloud (VPC).
   Data	This tab displays object storage and database assets, including cloud and on-premises data assets. Object storage: For example, Object Storage Service (OBS). Database: For example, Relational Database Service (RDS).
   Service Systems & Departments	This tab displays the Department and Service System information of an asset.

   • You can view the total number of assets below the asset list. You can view a maximum of 10,000 asset records page by page. To view more than 10,000 asset records, refine your filter criteria.
   • You can click in the upper right corner of the asset list and select the fields you want to display in the asset list.
   • The following table describes the fields in the asset list on the Resource Manager page. Note that some fields are not displayed by default. You need to click in the upper right corner of the asset list to customize the fields to be displayed.

     Table 2 Asset list field description

     Parameter	Description	Asset Tab
     Name/ID	Asset name and resource ID.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Service	Name of the cloud service to which the asset belongs	All Resources Cloud Resources Websites Network Resources Data
     Resource Type	Resource type. Resource types include IP address groups, alert rules, connections, and backups. Bandwidth, network interface, key, host agent, and VPC.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Server Status	Server status. Running Stopped Creating Faulty Migrating Normal Abnormal Creation failed	Servers - Servers
     Agent Status	HSS agent status. Not installed Online Offline Installation failed Installing	Servers - Servers
     Environment Provider	Environment provider. Cloud service Cloud platform Amazon Microsoft Google Alibaba Cloud Off-cloud asset	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Region	Region to which an asset belongs.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Risk Level	Risk status of the baselines, alerts, vulnerabilities, and incidents associated with an asset. Risky: At least one risk item was reported in the associated baselines, alerts, vulnerabilities, or incidents for the asset. If the number of associated baselines, alerts, vulnerabilities, and incidents of the asset is 0, there is no risk.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Protection Status	After the asset information is synchronized to SecMaster, the protection statuses of assets will be displayed on the SecMaster console. The protection statuses are as follows: If Protection Status for an asset is Protected, the corresponding security product has been enabled for the asset. If Protection Status for an asset is Unprotected, the corresponding security product has not been purchased or enabled for the asset. If you want to protect target assets, purchase corresponding security products and enable protection. For example, if you want to protect ECSs using HSS, purchase HSS and enable HSS for each ECS. For details about security products, see HSS Operation Guide, WAF Operation Guide, DBSS Operation Guide, and CFW Operation Guide. If Protection Status for an asset is Not supported, the corresponding security product is not supported in the current region. If Protection Status for an asset is Partially protected, protection has been enabled for only some of the assets.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Enterprise Project	Name of the enterprise project to which an asset belongs.	All Resources Cloud Resources Servers - Servers Websites Data
     URN	URN of an asset.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Department	Department to which an asset belongs. A department can have multiple service systems. A service system can have multiple assets. An asset can belong to only one service system.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Service System	Service system to which an asset belongs. A department can have multiple service systems. A service system can have multiple assets. An asset can belong to only one service system.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Resource Importance	Importance of an asset. Test General Important Core	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Tags	Asset tags.	All Resources Cloud Resources Servers - Servers Websites Network Resources Data
     Public IP Address	Public IP address.	Cloud Resources Servers - Servers Websites Network Resources Data - Databases
     Private IP Address	Private IP address.	Cloud Resources Servers - Servers Websites Network Resources Data - Databases
     VPC ID	VPC ID.	Cloud Resources Servers - Servers Websites Network Resources Data - Databases
     Subnet ID	A subnet is a unique CIDR block with a range of IP addresses in a VPC. You can divide a VPC into several subnets to help you plan IP addresses. All cloud resources in a VPC must be deployed on subnets. Subnets in the same VPC cannot overlap.	Cloud Resources Servers - Servers Websites Network Resources Data - Databases
     Security Group ID	A security group is a collection of access control rules for instances, such as cloud servers, containers, and databases, that have the same security requirements and that are mutually trusted within a VPC. You can define different access control rules for a security group, and these rules are then applied to all the instances added to this security group. A security group can have inbound and outbound rules. You need to specify the source, port, and protocol for each inbound rule and specify the destination, port, and protocol for each outbound rule to control the inbound and outbound traffic to and from the instances in the security group.	Cloud Resources Servers - Servers Websites Network Resources Data - Databases
     Host Alias	Host alias.	Servers - Servers
     Server/VM Type	Server/VM type. PM VM	Servers - Servers
     Resource Created	Time when a resource was created.	Cloud Resources Servers - Servers Websites Network Resources Data
     Resource Updated	Time when a resource was updated.	Cloud Resources Servers - Servers Websites Network Resources Data
     Instance Alias	Instance alias.	Data - Databases
     Database Port	Database port number.	Data - Databases
     Database Username	Database username.	Data - Databases
     Database Configuration	Database configuration information, including the database engine.	Data - Databases
     Database Version	Database version.	Data - Databases
     Network Type	Network type. Value range: Internet (INET) Cloud tenant network (VPC) Cloud platform (CLOUD) Undefined (N/A) On-premises IDC (IDC)	Network Resources
     Network ID	Network ID.	Network Resources
     IP Address	IP address.	Network Resources
     IP Type	Whether the IP address is an IPv4 or IPv6 address. IPV4 IPV6	Network Resources
     IP Network	Whether the network is internal or public. Private network Public network	Network Resources
     Port	Port number.	Network Resources
     Account ID	Account ID used for creating the corresponding server.	Servers - Servers
     Account Name	Account name used for creating the corresponding server.	Servers - Servers
     Owner	Asset governance owner.	All Resources Cloud Resources Servers - Servers Websites Data
     Description	Description of the asset.	All Resources Cloud Resources Servers - Servers Websites Data
     Server Name/IP Address	Name of the AI component asset.	Servers - AI Components
     Application Version	Application version of the AI component.	Servers - AI Components
     PID	Process ID.	Servers - AI Components
     Startup Path	Startup path of the AI component.	Servers - AI Components
     First Scanned	Time when the AI component was first scanned.	Servers - AI Components
     Last Scanned	Time when the AI component was last scanned.	Servers - AI Components

     

     Data included in the Asset Tab column indicates that the corresponding field applies to both OBS and Databases lists.

7. To view more details about an asset, check its asset type. Then, go to the corresponding resource tab and click the resource name of the asset to go to its details page. For example, to view details about a server, select the Servers tab. On the displayed tab, click the resource name of the target server to go to its details page.

   Table 3 Asset details description

   Tab	Asset Description
   Overview	Displays the basic information (such as the resource type and creation time), network information (such as the IP address), configuration information (such as the service, environment provider, and region), and management information (such as the owner, department, and service system) of the asset.
   Associated Assets	Displays assets associated with the current asset. You can bind or unbind the current asset to or from assets imported by you. For example, for a server, the EIP and VPC asset information associated with the server can be displayed on this tab.
   Associated Baselines	Displays the baseline check results associated with the asset. You can view the following information: Total Check Items: the number of baseline check items that are associated with the current asset and whose check status is Failed. Critical Risks: the number of risk check items whose Severity is Fatal and Status is Failed. High Risks: the number of risk check items whose Severity is High and Status is Failed. Medium Risks: the number of risk check items whose Severity is Medium and Status is Failed. Low Risks: the number of risk check items whose Severity is Low and Status is Failed. Informational Risks: the number of risk check items whose Severity is Tips and Status is Failed. Last Checked Check item list: You can view the check item, compliance pack, check status, severity, check method, and latest scan time. You can also whitelist check items in the Operation column.
   Associated Vulnerabilities	Displays information about the vulnerabilities associated with the asset. You can view the name, ID, affected assets, vulnerability ID, and last scan time of the associated vulnerability.
   Associated Alerts	Displays information about the alerts associated with the asset. You can view the alert name, severity, type, status, first occurrence time, and last occurrence time.
   Associated Incidents	Displays information about the incidents associated with the asset. You can view the incident name, severity, type, status, first occurrence time, and last occurrence time.