Solved

Meaning of Offline/Removed in Status & Previous Status columns of Immediate Threats report

  • 13 December 2021
  • 2 replies
  • 95 views

Userlevel 1
Badge

What is the Meaning of Offline/Removed in Status & Previous Status columns of the Immediate Threats report .

icon

Best answer by mike_talon 14 December 2021, 15:35

View original

2 replies

Userlevel 2
Badge +2

When the Cymulate Agent attempts to reach a URL or IP address, it may find itself unable to reach that site.  When that happens, the Cymulate Cloud also tries to reach that site. 

If the Agent cannot reach the site, but the Cymulate Cloud can reach it, then you have a successful block by your security controls.

If neither the Agent *or* the Cymulate Cloud can reach the site in question, then the site is marked as offline and the specific simulation event does not count against the overall Cymulate Score for the Assessment. 

In Immediate Threats, there is a third option. If we know for a fact that the site has been permanently taken down, the URL/IP will be marked as Removed to avoid confusion.

Userlevel 1
Badge

Thank you for the explanation Mike!

Reply