For HPE Nonstop environments, availability has always been critical. But today, availability alone is not enough.
Security teams also need to know what software is running, where vulnerabilities exist, and how that risk fits into the broader enterprise security picture.
That is where vulnerability data becomes valuable.
XYGATE Aegis Scan gives HPE Nonstop customers a way to identify Common Vulnerabilities and Exposures (CVEs), determine remediation measures, and bring those findings into the security processes already used across the organization.
With Release 1.1, that process becomes much more integrated.
Bring Nonstop Risk Into the Enterprise View
The most significant enhancement in Aegis Scan 1.1 is automated integration with the Qualys Enterprise TruRisk Platform.
HPE Nonstop vulnerability findings can now flow directly into Qualys, eliminating the need to manually import CVE information and giving security teams a more centralized view of risk across the enterprise.
That matters because Nonstop should not sit outside the organization’s broader vulnerability management program.
Most security teams are already evaluating risk across servers, applications, cloud platforms, databases, and other infrastructure. Bringing Nonstop findings into that same environment makes it easier to assess, prioritize, and act on risk without maintaining a separate process for a mission-critical platform.
Aegis Scan also supports XML, JSON, and CSV output, giving organizations additional flexibility to integrate vulnerability data into other security and reporting systems.
Know What Is Actually Running
Good vulnerability data starts with an accurate software inventory.
Aegis Scan 1.1 now automatically discovers installed HPE-provided Nonstop products. This helps ensure scans are based on the software actually running in the environment, including products that may not have been installed through DSM/SCM.
That removes a manual step and improves the accuracy of the vulnerability assessment.
Instead of relying on an inventory that has to be maintained separately, security teams can work from a more current view of the environment.
Keep CVE Data Current
A vulnerability scan is only as useful as the information behind it.
Release 1.1 can automatically download CVE files from HPE.com, keeping the HPE vulnerability catalog current and enabling near real-time synchronization of CVE data.
This reduces the manual work required to maintain vulnerability information and helps customers evaluate their environment against the latest available HPE CVE data.
Regular vulnerability scanning is also an established security practice and a requirement under standards including PCI DSS 4.0.1. Aegis Scan helps HPE Nonstop customers perform those scans and produce information that can support compliance and audit requirements.
More Deployment Flexibility
Release 1.1 also expands how Aegis Scan can be deployed.
Customers can run it as a standalone application on supported Windows or Linux systems and remotely scan one or more HPE Nonstop environments. This removes the need to install Aegis Scan directly on the Nonstop system and gives organizations more flexibility in environments with tighter network controls.
A unified installer across HPE Nonstop, Windows, and Linux further simplifies deployment and improves credential protection.
These changes make it easier to introduce vulnerability scanning without adding unnecessary complexity to the systems being protected.
From Data to Action
Measuring, monitoring, and mining production data should include security data.
For HPE Nonstop, that means knowing what is installed, keeping vulnerability information current, and making the results available to the teams responsible for enterprise risk.
Aegis Scan 1.1 brings those pieces together.
Automatic product discovery improves visibility. Automated CVE updates keep the information current. Cross-platform deployment makes scanning easier to manage.
Most importantly, the Qualys integration moves HPE Nonstop vulnerability data into the broader enterprise security process, where it can be assessed alongside everything else the organization is protecting.
That is where the real value is.
Not simply finding vulnerabilities, but making the data easier to use, prioritize, and act on.
Be the first to comment