Vulnerability Management

Currently, ConnectSecure supports vulnerability suppression at the vulnerability/problem or solution level only. We require the ability to create exceptions for a specific vulnerability on a specific user/system without impacting other assets. In enterprise environments, different users/systems may have project-specific application requirements where a particular application version is required due to business needs. A global suppression can create security visibility gaps across other systems. Adding user/system-level vulnerability exception capability with proper tracking and approval references would help organizations manage approved exceptions effectively while maintaining accurate vulnerability reporting and compliance.

We are looking for ConnectSecure to have an MCP interface that is secured by the same end user authorization it already provides. We would like to have our Ai Agents to have easy access to key device and tenant vulnerability information and other security scoring information by tenant. A MCP would allow our team to also have conversational questions with the Connectsecure platform.

It would be a benefit to be able to use company tags that are currently only used for Role Based Access Control (RBAC) to be allowed to be targeted with the various schedulers. Whether that be a scan scheduler, patch scheduler or report scheduler. Currently only asset tags are available and adding the company tags would also streamline setup when dealing with multiple groups of large, segmented clients.

On multiple areas of the console, we can see the private IP address of assets. Can we get the addition of the Public IP address as well, where able? This will assist in helping clients locate machines that are contained in different sites.

I would like to be able to set a custom delay for ticket creation for specific applications. An example would Chrome, which has a large amount of critical CVEs. We use ConnectSecure to autopatch Chrome, so it would be useful to delay ticket logging for these for a few days until we are sure a device is simply not updating.

We are using Ubiquiti UXG firewall at various locations and would love to leverage the firewall scanning feature within ConnectSecure. However, this FW is not yet added as a supported device. Could you please consider adding this as a feature?

It would be good to be able to run the Global Reports for selected tenants, utilizing the tenant tagging feature. Some of our clients are split across a few tenants due to the integration with our RMM tool. Being able to report globally on selected tenants will save a lot of time. Right now if I want to run the standard report for "Critical Internal Vulnerabilities - Global" for one specific client, I need to head into each tenancy (of which there are 14) and run the "Critical-High Vulnerabilities" report 14 times. Thank you for considering this!

Browser Extensions Vulnerability Scanning

The only way to see the difference between quick, detailed or deep is by selecting profile which most partners do not configure a profile should show this info on the external scan configuration

We observed that when a VMware RHEL8 VM is cloned, the CyberCNS agent on the cloned VM: Appears under the wrong company in the portal. Cannot fetch configuration or run scans. The original agent on the source VM may disappear from the portal. What the customer wants: A mechanism to detect if an agent is running on a cloned VM and automatically handle it, rather than requiring manual uninstall/reinstall.