Alert Logic® has updated Cloud Insight to identify hosts that have not been recently scanned. These hosts may contain undiscovered vulnerabilities, which present exposure to your environment. Identification of this exposure now occurs in both Cloud Insight and in the SIEMless Threat Management™ product.
This exposure is generated within the Alert Logic console when a newly discovered host has never been scanned or when a previously scanned host has not been recently scanned. In Cloud Insight, an exposure is raised 24 hours from the time of discovery or last scan.
Checking for & Remediating Exposure
To check for this exposure, navigate to Remediations > List in the Alert Logic console and select any Amazon Web Services deployment. Select the Configuration filter under Category on the left-hand side to display all issues related to Alert Logic configuration and deployment.
Note: The Configuration filter is not displayed if no configuration issues are present.
The remediation "Verify Deployment Configuration is not preventing vulnerability scanning" will be visible if this exposure is present. Often, the exposure results from a deployment issue, like a permission problem, that is preventing Alert Logic from automatically deploying an appliance. Review the other Configuration remediations present for more information and suggested fixes.