6. Security & Compliance

Vulnerability monitoring

CVE monitoring of the appliance’s own software components.

• Component Inventory — installed components and versions.
• Security Feeds / CVE Monitoring — vulnerability feeds; Check Settings sets the check frequency (manual / daily / weekly).
• Findings — discovered vulnerabilities with severity and known-exploited flag; Remediation Plan lists the suggested actions.
• Protection Overview — posture summary; exports in PDF and CVE JSON for your security team.

Workflow: set the frequency (or run a manual check), review the findings, then apply fixes from the Updates page.

Compliance — NIS2 reporting

A NIS2 conformity report generated from the appliance’s real data — not a questionnaire.

• Each control (e.g. Art. 21 backup & business continuity, access management, logging) is evaluated Passed / Failed with concrete evidence (e.g. “Scheduled=Yes · Retention=30 days”), a risk level and a remediation.
• Findings / Remediation Plan / Evidence Appendix — detail of actions and supporting proof.
• Operational Compliance Reminders — recurring duties (restore tests, access reviews…).
• PDF export — vector text, ready for the auditor.

Workflow: open the page (the assessment is recomputed from current data), fix the Failed controls following the indicated remediation, export the report.

Logs

Two registers, both searchable and filterable:

• Audit log — every administrative action (who, when, from which IP, outcome), with a per-row integrity hash.
• RADIUS authentication events — successes and failures with identity, MAC, NAS, VLAN and failure reason.

Filter by period/user/outcome; export CSV / JSON / PDF. Retention is configurable (default 90 days) with automatic pruning.