Network object dashboard

This topic describes the network object DASHBOARD tab, which provides an overview of the network object selected on the left.

DASHBOARD tab interface

Revision information area

This area displays the following information about the network object you are viewing:

Type

One of the following:

  • Host. A single IP address.
  • Range. A range of IP addresses.
  • Group. A group which contains network objects.
  • Abstract. For details, see Network objects.
Created on The date the object was created in AppViz.
Last updated The date the object was last updated.
Origin

Where the object was created. One of the following options:

  • AppViz Object
  • Imported. This includes objects imported from a CSV file, CMDB, or created via the API.
  • Device object
Last change Initiated by
  • How the object's current revision was initiated. One of the following options:
    • ASMS user
    • Update from device
    • Update from file, including objects updated from a CMDB.
    Devices The devices the object is defined on.

    Note: This field only appears for objects currently defined on devices. If a device object being used in an application is deleted from its devices, AppViz will keep the object alive, and the following warning appears:

    In PCI Zone
  • The object intersects the PCI zone that is defined in AFA.

    • When an object is in the PCI zone, a pale teal background appears with the object's icon:

    Additionally, the PCI system tag is automatically associated with all applications containing the object in their active revision.

    For more details, see Customize the regulatory compliance report.

    Object change status

    Network objects may have one of the following change statuses:

    In Change Process
  • The object's definition in AppViz has been updated, and the FireFlow change request to modify the relevant traffic is pending.

    • When an object has this change status, appears in the upper right corner of its page. Additionally, appears on the object's icon in any application flows, projects, or discovery processes.

    Note: Objects in change process cannot be edited, used in projects or included in discovery from traffic logs. They can be used in flows.
    Rejected
  • The object was in change process, and its FireFlow change request was rejected.

    • When an object has this change status, appears in the upper right corner of its page. Additionally, appears on the object's icon in any application flows, projects, or discovery processes.

    Note: Objects with the Rejected change status cannot be edited, used in projects, included in discovery from traffic logs or used in flows.

    Some objects may have a notification that is not related to change status, but because it is in a problematic scenario. Some objects may have outdated revisions being used in applications. When this is the case,  appears in the upper right corner of its page and appears on the object's icon in any application flows or projects using the outdated revision. This situation can only occur as the result of an import when the Do not update the affected applications automatically option is chosen. This is relevant to device object updates (from AFA) or network object imports from a CSV or CMDB. For more details, see AppViz maintenance.

    Network object actions

    For each network object, the DASHBOARD tab provides the following options at the top-right:

    Edit

    This action allows you to edit the network object. A change request opens in FireFlow to adjust traffic for the new object definition.

    You cannot edit network objects if they are in use by an application for which you do not have permissions or if they are in use by an application in the Pending Implementation status.
    Clone This action creates a new network object with the same contents.
    Delete
  • This action deletes the network object.
    • Replace This action replaces abstract network objects with real objects.
    Update Applications
  • This action updates all the applications using the object to the current revision of the object. The outdated object is replaced with the current object, and a change request opens in FireFlow to adjust the traffic requirements.

    • This action is only relevant for objects which were edited, and the applications using the object were not updated with the new revision of the object.
    Discard Change This action discards the revision of the object. A change request opens in FireFlow to adjust traffic for the previous object definition.

    Note: This is action is only relevant for Rejected objects.
    Re-apply Changes

    This action re-applies the new revision of the object. Use this action after further modifying a rejected object. A change request opens in FireFlow to adjust traffic for the new object definition.

    Note: This action is only relevant for Rejected objects.
    Update from Device

    This action updates the definition of a device object.

    Note: When a FireFlow change request is created as the result of an object action, the subject of the change request signifies the object.

    For more details, see Add and edit network objects.

    Object content and status information

    Object content and status information includes:

    Status details

    This appears when a group object is In Change Process or Rejected because of one of its members.

    If your AppViz environment is configured to open a FireFlow object change request to change the definition of device objects on their devices, this tab also appears for objects pending creation on the device. For more details, see Device objects.

    Content or members

    The Content (in the case of a host or range) or Members (in case of a group) of the network object.

    If members of an object are Rejected, Outdated, or In Change Process, this is indicated with an exclamation point. If a member is rejected, the whole object is marked as rejected.
    Containing objects

    This includes objects which contain the network object or objects which contain an object which contains the network object.

    Click the desired tab to display the content.

    General Information area

    This area displays custom fields for the object. For more details, see Custom fields and AppViz maintenance.

    Vulnerability Assessment area

    This area displays all the vulnerabilities for the network object. This area only appears if the following are true:

    • Vulnerability Assessment is enabled.
    • The network object has been scanned.

    Note: Network objects will not be scanned when the Server Max Size field is less than the number of IP addresses the object contains. The default value for this field is six.

    For more details, see Manage vulnerability assessment scanners.