CVE monitoring of the appliance’s own software components.
Component Inventory — installed components and versions.
Security Feeds / CVE Monitoring — vulnerability feeds; Check Settings sets the check frequency (manual / daily / weekly).
Findings — discovered vulnerabilities with severity and known-exploited flag; Remediation Plan lists the suggested actions.
Protection Overview — posture summary; exports in PDF and CVE JSON for your security team.
Workflow: set the frequency (or run a manual check), review the findings, then apply fixes from the Updates page.
Compliance Evidence
The layout below describes an upcoming customer update. Installed releases may show different labels and report options until that update is published and installed.
It organizes appliance data into Overview, Technical Checks, Risk Signals, Framework Mappings, Audit Trail and Reports. The score describes the observed appliance checks. It is not an organization-wide compliance score.
Technical Checks — review the check result, supporting evidence and suggested remediation before accepting a finding.
Framework Mappings — relate selected appliance safeguards to ISO/IEC 27001:2022, SOC 2 Trust Services Criteria, GDPR, NIS2, PCI DSS v4.0.1, NIST CSF 2.0, CIS Controls v8.1 and DORA. A mapping is not a complete framework assessment.
Audit Trail — review historical administrative and security events separately from the current appliance snapshot.
Reports — generate an executive summary or a selected framework mapping in PDF, JSON or CSV. Reports state their evidence scope and limitations; CSV contains findings or controls.
Workflow: run appliance checks, investigate failed or unassessed items, review the relevant audit period, select a report and export it. Check the output before sharing it with an auditor.
Scope: the report records point-in-time technical observations from one appliance. Legal applicability, organizational policies, external infrastructure and formal audit conclusions require separate review. It does not certify conformity or replace an independent assessment.
Logs
Two registers, both searchable and filterable:
Audit log — every administrative action (who, when, from which IP, outcome), with a per-row integrity hash.
RADIUS authentication events — successes and failures with identity, MAC, NAS, VLAN and failure reason.
Filter by period/user/outcome; export CSV / JSON / PDF. Retention is configurable (default 90 days) with automatic pruning.