Role Availability | ✔️ Read-Only ✔️ Investigator ✔️ Analyst ✔️ Manager USM Anywhere provides a centralized view of your configuration issues. Go to Environment > Configuration Issues to see this centralized view. The configuration issues page displays information on configuration issues. On the left you can find the search and filters options. In the upper side of the page, you can see any filters you have applied, and you have the option to create and select different views of the configuration issues. The main part of the page is the actual list of configuration issues. Each row describes an individual configuration issue and includes a check box on the left side of each one for selecting it. You can select all the configuration issues on the same page by clicking the check box in the first column of the header row. If you want to analyze the data, you can maximize the screen and hide the filter pane. Click the icon to hide the filter pane. Click the icon to expand the filter pane. The following table displays the list of the default columns found on the page. List of the Default Columns in Configuration Issues
Column Field NameDescription
Last SeenLast date on which the configuration issue was seen in the asset. The displayed date depends on your computer’s time zone
CategoryCategory of the configuration issue. Issues with similar impacts have the same category
SubcategorySub-category of the configuration issue. The sub-category explains the detail of the issue
AssetAsset associated with the configuration issue
SeveritySeverity of the issue (values are Low, Medium, or High)
DescriptionText for identifying the configuration issue
First SeenDate of detection of the configuration issue in the asset (the displayed date depends on your computer’s time zone)
Click the to access the following options. Your access to these options may vary based on your user role. See Role-Based Access Control (RBAC) in USM Anywhere for more information:
  • Add to Current Filter: Use this option to add the asset name as a search filter. See Searching Events for more information.
  • Find in Events: Use this option to execute a search of the asset name in the Events page. See Searching Events for more information.
  • Look up in OTX: This option searches the IP address of the asset in the OTX page. See Using OTX in USM Anywhere for more information.
  • Full Details: See Viewing Assets Details for more information.
  • Configure Asset: See Editing Assets for more information.
  • Delete Asset: See Deleting the Assets for more information.
  • Assign Credentials: See Managing Credentials in USM Anywhere for more information.
  • Authenticated Scan: This option displays depending on the USM Anywhere Sensor associated with the asset. See Running Authenticated Asset Scans for more information.
  • Scan with BlueApp: This option enables you to run an asset scan through an BlueApp. See Running Asset Scans Using a BlueApp for more information.
  • Configuration Issues: This option opens the Assets Details page. The Configuration Issues tab is selected in the page. See Viewing Assets Details for more information.
  • Vulnerabilities: This option opens the Assets Details page. The Vulnerabilities tab is selected in the page. See Viewing Assets Details for more information.
  • Alarms: This option opens the Assets Details page. The Alarms tab is selected in the page. See Viewing Assets Details for more information.
  • : This option opens the Assets Details page. The Events tab is selected in the page. See Viewing Assets Details for more information.
You can configure the view you want for the list of alarms. See Alarms Views for more information. Click Generate Report to open the Configure Report dialog box. See Create an Alarms Report for more information. Click the icon to change the graph to a Count/Time, MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) or Alarms Strategies by Intent view. See Alarms List View for more information. Click the icon to bookmark an item for quick access.
You can view your bookmarked items by going to the secondary menu and clicking the icon. This will display all of your bookmarked items and provide direct links to each of them.
Click the icon to filter your search by row fields. See Filtering Alarms by Row Fields for more information. You can choose the number of items to display by selecting 20, 50, or 100 below the table. You can classify some columns by clicking the icons to the right side of the heading. You can sort the item information in ascending or descending order.

​
Views

USM Anywhere enables you to define and save a custom Configuration Issues view to have your own selected filters. You can configure the view you want for the list of items in the page. To create a view configuration
  1. From the list view, select the filters you want to apply.
  2. Go to Save View > Save As. The Save Current View dialog box opens.
  3. Enter a name for the view.
  4. (Optional.) Select Share View if you want to share your view with other users.
  5. Click Save. The created view is already selected.
To select a configured view
  1. From the ist view, click View above the filters.
  2. Click Saved Views, and then select the view you want to see.
    A shared view includes the icon next to its name.
  3. Click Apply.
To delete a configured view
  1. From the Configuration Issues list view, click View above the filters.
  2. Click Saved Views, and then click the icon next to the saved view you want to delete. A Settings Delete dialog box opens to confirm the deletion.
  3. Click Accept.
    The icon does not display if the view is selected.
You can only delete the views you have created.

​
Configuration Issues from the Assets Main Page

To explore configuration issues from assets
  1. Go to Environment > Configuration Issues.
  2. Filter assets by clicking Has Configuration Issues. See Searching Assets for more information.
  3. Click the icon and select Configuration Issues. The asset details page opens with the list of configuration issues.