The asset fingerprints feature can automatically collect asset fingerprints at specific intervals. The feature also allows you to manually collect asset fingerprints. This topic describes how to collect asset fingerprints.

Background information

After you purchase Security Center Enterprise or Ultimate, Security Center does not automatically collect asset fingerprints. You can use automatic or manual collection tasks to collect the latest fingerprints of specific assets.

You can select one of the following collection methods:

Collection methods Description
Automate periodic collection tasks You can configure fingerprint collection frequencies for assets, such as listener ports, software, processes, accounts, scheduled tasks, and middleware, to automate collection tasks that periodically run. For more information, see Automate periodic collection tasks.
Collect the fingerprints of all assets with a few clicks You can manually collect the latest fingerprints of all assets. On the Server (s) tab of the Assets page, click a subtab other than the Server subtab and click Collect the latest data to collect the latest fingerprints of all assets by running a collection task For more information, see Collect the fingerprints of all assets with a few clicks.
Collect the fingerprints of a specific asset with a few clicks You can manually start a task to collect the fingerprints of an asset. On the Assets page, click the name of the asset whose fingerprints you want to collect. On the asset details page, click the Asset Fingerprints tab. In the upper-right corner of a subtab, click Collect data now to manually start a task to collect the fingerprints of the asset. For more information, see Collect the fingerprints of a specific asset with a few clicks.
Note
  • If you are a first-time user of the asset fingerprints feature, we recommend that you configure the fingerprint collection frequency for different assets to automate collection tasks. The automatic collection tasks collect the fingerprints of all assets.
  • Collection tasks consume a small amount of CPU or memory resources of your server. Therefore, your business is not affected.

Limits

Only the Enterprise and Ultimate editions of Security Center support this feature. If you do not use these editions, you must upgrade Security Center to the Enterprise or Ultimate edition before you can use this feature. For more information about how to purchase and upgrade Security Center, see Purchase Security Center and Upgrade and downgrade Security Center. For more information about the features that each edition supports, see Features.

Automate periodic collection tasks

Security Center automatically collects the fingerprints of all your assets, such as ports, software, processes, accounts, scheduled tasks, and middleware. After you configure automatic collection, you can view the latest fingerprints that are collected within a specific time range on the Server (s) tab of the Assets page in the Security Center console.

  1. Log on to the Security Center console.
  2. In the left-side navigation pane, click Assets.
  3. On the Assets page, click the Server(s) tab.
  4. On the Server(s) tab, click the Account subtab.
    You can also click a subtab other than the Server subtab to configure collection tasks. You do not need to click all subtabs.
  5. Click Settings.
  6. In the Settings dialog box, configure the collection frequency for each asset type. Settings
    Asset type Frequency
    Port Valid values:
    • Disable: This is the default value. If you set Port to Disable, Security Center does not automatically collect the latest fingerprints.
    • Collected once an hour
    • Collected once every 3 hours
    • Collected once every 12 hours
    • Collected once a day
    • Collected once every 7 days
    Note
    • By default, the collection frequencies of all assets are Disable. You can configure different collection frequencies for the assets.
    • To configure a collection frequency for middleware, databases, and web services, you can configure the Middleware parameter.
    • If you use the asset exposure analysis feature, set the Middleware parameter to Collected once an hour, Collected once every 3 hours, Collected once every 12 hours, or Collected once a day. You cannot set the Middleware parameter to Disable or Collected once every 7 days.
    Processes
    Account
    Software
    Scheduled Tasks
    Middleware
    Startup Item
    Kernel Module
    Website
  7. Click OK.
    After the collection frequencies are configured, Security Center automatically runs collection tasks based on the collection frequencies. You can view the latest fingerprints of an asset on a subtab other than the Server on the Assets page. For more information, see View asset fingerprints.

Collect the fingerprints of all assets with a few clicks

If you want to view the latest fingerprints of all assets, you can perform the following steps:

  1. Log on to the Security Center console.
  2. In the left-side navigation pane, click Assets.
  3. On the Assets page, click the Server(s) tab.
  4. On the Server(s) tab, click the Account subtab.
    You can also click a subtab other than the Server subtab to configure collection tasks.
  5. Click Collect the latest data.
  6. In the Collect the latest data dialog box, select the assets whose fingerprints you want to collect.
  7. Click OK.
    The time required to collect the fingerprints is approximately 1 to 5 minutes.

Collect the fingerprints of a specific asset with a few clicks

If you want to view the latest fingerprints of a specific server, you can find the server on the Assets page, navigate to the Asset Fingerprints tab of the server, and run a manual collection task. The task collects fingerprints of ports, processes, and software.

  1. Log on to the Security Center console.
  2. In the left-side navigation pane, click Assets.
  3. On the Assets page, click the Server(s) tab.
  4. On the Server(s) tab, click the Server subtab.
  5. In the server list, click the name of the server whose fingerprints you want to collect.
  6. On the asset details page, click the Asset Fingerprints tab.
  7. In the upper-right corner of a subtab on which you want to collect fingerprints, click Collect data now to start a collection task.
    Collect the fingerprints of an asset
  8. In the Collect data message, click OK.
    The time required to collect the fingerprints is approximately 1 to 5 minutes.

What to do next

After you run the collection task, you can go to the Server (s) tab of the Assets page and click the subtab to view the latest fingerprints. For more information, see View asset fingerprints.