Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configuring Environmental Risk for an Asset

Use the CVSS Environmental Score to manipulate and prioritize the risk score on selected assets. If you configure the CVSS, Weight & Compliance parameters for an asset, you can apply higher risk scores to assets that are more important or critical.

You must have the correct license capabilities to perform the following scanning operations. If you need assistance to obtain a new or updated license key, contact your Juniper Customer Support.

If you have important or critical assets and less important assets with the same vulnerabilities, you can configure the CVSS Environmental Score on the important assets or critical assets to have a higher risk score than the less important assets. By applying a higher risk score to your most important assets, you highlight these important assets in your scan results.

  1. Click the Assets tab.
  2. On the navigation menu, click Asset Profiles.
  3. Double-click the asset that you want to edit, and then click Edit Asset.
  4. Click CVSS, Weight & Compliance in the Edit Asset Profile window.
  5. Configure the parameters in the CVSS, Weight & Compliance pane.

    The following table lists the parameters for the CVSS, Weight & Compliance pane.

    Parameter

    Description

    Collateral Damage Potential

    The potential for loss of life or physical assets through damage or theft of this asset, or economic loss of productivity or revenue. If you raise the Collateral Damage Potential, for example, from Low to High, the calculated value for the CVSS Score increases.

    The Collateral Damage Potential parameter is directly linked with the Weight parameter. If you change one parameter the other parameter is impacted.

    Confidentiality Requirement

    The impact to confidentiality for this asset when a vulnerability is exploited. If you raise the confidentiality requirement, for example, from Low to High, the calculated value for the CVSS Score increases.

    Availability Requirement

    The impact to the asset's availability when a vulnerability is successfully exploited. Attacks that consume network bandwidth, processor cycles, or disk space impact the availability of an asset. If you raise the availability requirement setting, for example, from Low to High, the calculated value for the CVSS Score increases.

    Integrity Requirement

    The impact to the asset's integrity when a vulnerability is successfully exploited. Integrity refers to the trustworthiness and guaranteed veracity of information. If you raise the integrity requirement, for example, from Low to High, the calculated value for the CVSS Score increases.

    Weight

    The Weight is linked with the Collateral Damage Potential setting. If you select 10 for the Weight parameter the Collateral Damage Potential changes to High.

  6. Click Save.

Related Documentation