Investigate Risks
Investigate Risks
Navigate to Investigate > Risks menu to see a list of devices with high, medium or low priority. The screen provides the event view and device view for the information representation. You can see the number of devices with risk at the top right chart.
Events view shows the information in device summary and event drill down table.
 |
- You can see the host name, type, tags assigned and managed or unmanaged information.
- Click on the details link to see the device summary.
- You can see the risk score calculated by the Netskope proprietary risk engine, which categorizes packet alerts, device software vulnerabilities and device behavior anomalies into threat vectors.
- It shows if the device is Wi-Fi, wired or undefined interface connected.
- You can see the operating system and site assigned information. It shows if the device is user or automatically controlled.
- Displays a list of risk factors with severity and number of occurrences. You can create policy by selecting one or multiple risk issues or modify the severity of the risks.
Device view shows the information in the Inventory menu with risk severity search.
 |
Device Details
Navigate to the Investigate > Risks menu and click on the details link of any device from the device summary screen. You will see detailed information about the device and the risks.
 |
The screen shows a pie chart risk score and distinct risk contributions to the score of the device. You can see the drill-down details of the device on the left side. On the page you can see the alert and anomaly occurrences to raise a risk with the time of occurrence for the last 30 days to investigate the issue. You can also see the transfer of information in bytes received and bytes sent charts for the last 10 days.
 |
On the device risk summary page, you can see the device compliance with the asset management systems services. You can also see the interface connection on the left side.
 |
Drilling down, risk assessment shows the list of risk issues on the device with severity and number of occurrences.
 |
