Unmanaged Assets Inventory
The Unmanaged Assets Inventory page provides information about your unmanaged (or shadow IT) assets that are publicly exposed on the internet and attributed to your organization. You can use this information to gain valuable insights into your publicly exposed assets and enhance your security posture.
The Unmanaged Assets Inventory page is only available if you have subscribed to Discovery and Exposure Management on Prisma Cloud. See Subscribe to Discovery and Exposure Management for more details.
The following graphic provides a visual overview of the steps you need to take to inspect and review your exposed assets.
Log into Prisma Cloud and select Inventory > Unmanaged Assets to access information about your exposed (unmanaged) assets, categorized according to the cloud service providers. Each row displays the cloud name and the total count of exposed assets within that specific cloud.
To make your exploration even more efficient, use the following filters:
Date Filter: Set it to Most Recent to view the latest state of the exposed assets inventory or select Custom for any date within the last 7 days.
Status Filter: Apply this filter to view a comprehensive list of your Active assets separately from the Snoozed assets.
Asset Type Filter: Apply this filter to view various types of scanned assets, such as Domain and Responsive IPs.
Account Mapped Status Filter: Apply this filter to view a comprehensive list of your Mapped assets separately from Unmapped assets.
Mapped— Shows exposed assets that are associated with a parent account or organizational unit (OU) accounts on Prisma Cloud. You can secure these assets by onboarding them to Prisma Cloud.
Unmapped— Shows exposed assets that cannot be linked to a parent account or organizational unit (OU) accounts on Prisma Cloud. You can Send Email to receive a summary of the assets for further investigation.
Network Flowlog Filter: Apply this filter to narrow down assets that are internet-exposed and connected to secured assets.
Exposed Service Filter: Narrow your search to specific types of services running on the exposed assets, such as HTTP servers, RDP servers, and more.
Select the link in each row to be redirected to the Exposed Assets view for a deeper insight into the selected asset. Within the Exposed Assets view, you will find the following tabs containing detailed asset information:
Overview: This default tab provides a comprehensive overview of the selected asset, including details such as server name, resource type, expiry date, and so on.
Exposed Service: Displays the list of exposed services that are running on the selected asset, such as HTTP servers and other relevant services. Select a listed service to access granular information on the IPs and Certificates associated with it.
Vulnerabilities: Displays Common Vulnerabilities and Exposures (CVE) discovered on the asset. The severity levels of the CVEs are categorized based on the Common Vulnerability Scoring System (CVSS) scores. Also, the Impacted Distros section provides more details on the affected versions of a particular package.
Findings: Displays findings which are security issues. If you have exposed information for the asset from Prisma Cloud and third-party sources, the findings from Prisma Cloud are prioritized and displayed.
Network Flow Log: Provides a visual representation of the relationship between an internet-exposed (unmanaged) asset and secured (managed) assets over a 24-hour period. It displays the direction of the traffic flow and the number of bytes exchanged between them.
After you review and explore the asset findings, you can:
Click Convert to Managed to onboard assets to Prisma Cloud. This feature is only available for accounts associated with the parent account or organizational unit (OU) accounts on Prisma Cloud.
Click Send Email to receive a summary of exposed assets for further investigation when mapping between the accounts associated with the parent account or organizational unit (OU) accounts on Prisma Cloud is not feasible.
tt:[Optional] While inspecting unmanaged assets, you can snooze known internet-exposed assets, such as test or vendor-exposed assets. You can snooze one or multiple assets at a time. Use the search bar to find assets by Domain name or IP address. Snoozing known assets helps you view Active assets separately from Snoozed assets using the Status Filter. To snooze an asset, follow these steps:
Select the Snooze button.
Choose to Snooze Temporarily or Snooze Forever.
If snoozing temporarily, set a time limit.
Select a Reason to snooze the asset.
Select Snooze Unmanaged Asset.
After snoozing, set the Status filter to Snoozed on the Inventory > Unmanaged Assets page. This will display the list of snoozed assets, including their snooze duration and reasons. You can also Unsnooze assets as needed.
Last updated
Was this helpful?