ZPC displays a slew of information for each asset it finds in your cloud infrastructure. You can view each asset in detail by selecting the asset name.

On the Asset Details (Cloud Asset > Asset name) page, you can view the following tabs:

• Properties

  The cloud asset properties offer information on asset details and asset configuration metadata.

  On the Properties tab, you can do the following:

  1. View the asset details. ZPC extracts the details from the asset metadata JSON.

  When an asset is publicly exposed and associated with a trusted IP list, a link is provided against the publicly exposed attribute to navigate to the associated trusted IP list on the Trusted IP Management page. See image.

  

  Close

  2. View the metadata. ZPC displays the asset configuration metadata it collects from your cloud account.
  3. Download the metadata JSON file.
  4. Copy the metadata to your clipboard.

  

  Close
• Graph View

  The Asset Graph View tab offers a topological co-relation with other assets, roles, identities, and asset types. You can interact with each graph node to view more information on the details panel.

  

  Close
• Timeline

  The cloud asset timeline offers information on the cloud asset changes, CSP events, or activities in the cloud infrastructure.

  On the Timeline tab, you can do the following:

  • View all the CSP events or activities in the cloud infrastructure performed on a cloud asset and identify the Cloud Identity modifier and the timestamp for when the asset was last modified. You can click on the modifier identity for the Cloud Identity details.
  • View the changes on the cloud asset, track, correlate, and investigate incidents and perform potential root cause analysis of the same. For AWS, you can also view the account ID and request parameters during resource state creation or update.
  • View the data for up to 6 months.

  • View the alerts triggered by data collection activity for the asset.

    See image.

    

    Close

  • View the assets of the newly onboarded CSP account along with the metadata.

  

  Close
• Compliance Policies

  The cloud asset compliance policies offer information on the status of the compliance policy for the cloud asset.

  On the Compliance Policies tab, you can do the following:

  1. View the following details in the compliance policy table:
     • Policy ID: The security policy ID.
     • Policy: The name of the security policy.
     • Status: The status of the security policy (Passed, Failed).
  2. Filter the policies based on the status (All, Passed, Failed).
  3. Search for a specific policy.
  4. Modify the table and its columns.

  

  Close
• Alerts

  The cloud asset alerts offer information on the alerts and the status of the alerts for the cloud asset.

  On the Alerts tab, you can do the following:

  1. View the following details in the alert table:
     • Alert ID: Unique ID of the alert. Click to view the alert details (Alert Details, Policy Details, Metadata) for open and resolved alerts.
     • Risk Level: The alert risk level (Critical, High, Medium, or Low).
     • Policy Name: The name of the security policy.
     • Last Updated: The timestamp for when the alert was last modified.
     • Alert Age: The age of the alert (in days) from the last time the Alert Status was set to Open.
     • Status: The status (Open, Closed, Resolved, or Ignored) of the alert.
  2. Filter the alerts based on the status (Open, Closed, Resolved, or Ignored).
  3. Search for a specific alert using the searchable columns.

  Close
• Tags

  The cloud asset tags offer information on the key-value tag pairs. Tags are used to group various asset types across ZPC. The key-value tag pairs provide additional details about the resources.

  On the Tags tab, you can do the following:

  1. View key-value tag pairs.
  2. Search for keys or values in the tag table.

  

  Close
• Vulnerabilities

  ZPC detects vulnerabilities that exist in your cloud assets and provides in-depth information about assets and the common vulnerability and exposure (CVE) details, so you can quickly investigate and fix the issues. To learn more, see About Vulnerability Management.

  You can view the total number of vulnerabilities that ZPC detects in assets within containers and also the vulnerability details associated with a specific package.

  Viewing the Asset Vulnerabilities

  To view the total number of vulnerabilities detected in a container asset:

  1. In the left-side navigation of the ZPC Admin Portal, go to Cloud Posture > Cloud Assets.

  The Cloud Assets page is displayed.

  See image.

  

  Close

  2. From the list of Asset Categories, search for Containers, then click the Asset Type for which you want to view the details.

  The asset details are displayed.

  See image.

  

  Close

  3. Click the required Asset Name to view additional details and select Vulnerabilities.

  See image.

  

  Close

  4. On the Vulnerabilities tab, you can do the following:
     1. View the following details in the vulnerability table:

        • Package Name: The name of the impacted package. Click to view the CVE and package details.

          Packages with the highest count of CVEs and highest level of severity are listed first in the table.

        • Version: The version of the impacted package.
        • Package Path: The path of the impacted package.
        • Vulnerabilites: The total number of vulnerabilities based on the level of severity.
     2. Filter the data by:
        • Vulnerable Packages: View all packages, or packages with or without vulnerabilities.
        • Package: View the details of a specific package.
        • Version: View the package version.
     3. Export the vulnerability data to a CSV file and download the report.

  

  Viewing the Package Vulnerabilities

  When you click the Package Name in step 4 of the previous section, another drawer displays the following details:

  1. The left-side navigation displays a list of packages.
  2. On the Vulnerabilities page, you can see the following:

  • CVE ID: The unique identifier for the CVE. Click to view additional vulnerability details.
  • Severity: The severity level (Low, Medium, High, or Critical) of the vulnerability.
  • CVSS SCORE: The severity score assigned to the vulnerability.
  • Age of CVE: The number of days the vulnerability was present in the source code when reported.
  • Fix Available: The fix version for the package is available or not.
  • Fix Version: The package version that contains the vulnerability fix.

  3. Filter the packages by:

  • Severity: View packages for a specific level of severity (Critical, High, Medium, Low, or Unknown).
  • CVSS Score: View packages based on the CVSS score.
  • Fix Available: View packages for which a fix version is available or view packages that don't have a fix version. By default, all the packages are displayed when you first view the data. You can then apply the filter as required.

  4. Search for a specific CVE ID.

  

  Close