Security Guardian Current

Assessments are a set of Discoveries that are evaluated against collected data to identify vulnerabilities in your organization's Active Directory domain(s). They run automatically once added, and then run periodically, depending on how often Active Directory data is collected. This allows you to identify which Active Directory objects within scope contain vulnerabilities that require further investigation and remediation.

To access Assessments functionality:

From the left navigation menu, choose Security | Assessments.

First Assessment Notification Email

If email is configured for Security Guardian, after the first Assessment is completed for the organization, a notification email is sent which includes the total number of the following:

Findings without vulnerable objects
Findings with vulnerable objects
Findings with inconclusive results
Findings that returned an error

NOTE: This notification applies only for the first Assessment that is completed for an organization. If email is configured after the first Assessment has run, a notification will not be sent. Subsequent emails will be sent advising that the Assessment has been completed and vulnerable objects have grown in scope.

Built-in Assessments

Security Guardian includes a built-in Assessment, Active Directory Security Assessment. It contains all pre-defined Discoveries provided by Quest and is run on all domains configured in On Demand for your organization.

NOTE: If no domains are configured for Active Directory data collection, the status message Configuration Required will display in the All Assessments list.

Pre-defined Discoveries are added automatically to this Assessment as they are released by Quest.

NOTE: A built-in Assessment cannot be edited or deleted.

All Assessments List

The All Assessments tab displays a list of all Assessments (both built-in and user-created) for the organization along with the following information for each:

the Assessment name (with a link to Assessment Details)
the Active Directory domain containing the assessed objects (with the option to Link to Results)
the Workload (currently Active Directory)
Created By either:
- System (for a built-in Assessment provided by Quest)
  
  OR
- User (for a user-created Assessment)

the Status of the Assessment:

Configuration Required

NOTE: This status is used to indicate the absence of an Active Directory domain in On Demand for the organization. This may be because:

A domain has not yet been added to On Demand, which will prevent the built-in Assessment from running.
The domain selected for the Assessment has since been removed from On Demand.
When the Assessment was created, all available domains were excluded.

Agent Required (See Configuring Additional Components -Hybrid Agent)