Networks - User Interface Components

1.0 Introduction

The article describes the Fortanix Key Insight user interface (UI) features for an on-premises Network infrastructure.

2.0 Terminology References

For Fortanix Key Insight on-premises connection concepts and supported features, refer to On-premises Connection Concepts.

3.0 Overview

The on-premises connection Overview page appears after adding an on-premises connection.

The Overview page displays the scanned cryptographic assets count based on the applied Fortanix Key Insight policy.

For more information on the Fortanix Key Insight policy, refer to Cryptographic Policy Management.

NOTE

• If the Overview page for networks does not display any data, configure the Fortanix On-premises Scanner. For more information, refer to On-premises Scanner Configuration.

• In the networks UI, the order of tabs depends on the availability of resources in each tab (DATABASES, SOURCE CODE, CONTAINERS, NETWORKS, and FILE SYSTEMS). You will always see results in the first tab that has scanned data available. If no data is present at connection level, the default order is FILE SYSTEMS > DATABASES > SOURCE CODE > CONTAINERS > NETWORKS.

• If your Fortanix Armor account is deactivated and you are accessing the Fortanix Key Insight On-premises connection for networks, you will not be able to view data on the Overview, Assessments, Keys, Resources, Certificates, Cryptographic Assets, or PQC Central pages. You will only have access to view and delete items under Configuration, including Connections, Policy Center, and Authentication pages.

• Click RESCAN to rescan the on-premises connection. For more information, refer to Section 5.0: Rescan an On-premises Connection.

• Click ASSESSMENT REPORT to navigate to the Assessment page.

• Click GO TO CRYPTOGRAPHIC ASSETS to navigate to the Cryptographic Assets page. For more information, refer to Section 6.0: Cryptographic Assets.

The Overview page is described in the following sections:

3.1 Discovered On-Premises Resources

This section provides the count of scanned on-premises infrastructures, including databases, file systems, source code repositories, and container images.

It also displays the count of the following in the scanned on-premises infrastructures:

• Cryptographic assets

• Keys

• Certificates

• Resources

NOTE

• The total number of cryptographic assets includes those discovered through associated network scans, if any.

• The total number of keys displayed in the Discovered On-premises Resources section is only the count of the “Current” key versions in the on-premises infrastructures.

Clicking the Cryptographic Assets, Keys, Certificates, and Resources labels navigates you to their list view.

3.2 Cryptography Bill of Materials (CBOM)

Currently, CBOM export is not supported for Networks. Therefore, the exported data does not include details of cryptographic assets scanned from Networks.

4.0 Assessments

After adding an on-premises connection, you can access the Fortanix Key Insight Assessment page from the left navigation panel.

Click GO TO CRYPTOGRAPHIC ASSETS to navigate to the Cryptographic Assets page. For more information, refer to Section 6.0: Cryptographic Assets.

5.0 Rescan an On-Premises Connection

Click RESCAN on the top-right corner of the Overview or Assessment page to perform a rescan and verify if any keys have been added, deleted, or updated in the Fortanix On-premises Scanner.

If you click RESCAN and start the scan, you can monitor its progress in the progress bar. After the scan is completed successfully, the Last scanned label will be updated with the completion date and time.

NOTE

• The RESCAN option is accessible only to users with the Account Administrator and Group Administrator roles.

• The RESCAN option is available only when the on-premises connection status is Connected.

6.0 Cryptographic Assets

After onboarding an on-premises connection with network assets, navigate to the NETWORKS tab on the Cryptographic Assets page to view all scanned cryptographic assets.

The scanned cryptographic assets are categorized into the following sections:

• X509

  

• TLS

  

• HTTP AND DNS

  

For each cryptographic asset:

• Click EXPORT to export the scanned cryptographic assets data. For more information, refer to Section 7.0: Export Scanned Data.

• Enter a value in the Search field to filter the cryptographic assets based on the available criteria and supported values:

  For example,

  • UID

  • TLS Version

6.1 View Cryptographic Asset Details

NOTE

The VIOLATIONS tab currently does not display any data.

6.1.1 X509

Click a cryptographic asset on the X509 tab to view its properties and associated violations.

• The CRYPTOGRAPHIC ASSET DETAILS tab displays the cryptographic asset properties, host, and Subject Alternative Names (SANs) details.

6.1.2 TLS

Click a cryptographic asset on the TLS tab to view its properties and associated violations.

• The CRYPTOGRAPHIC ASSET DETAILS tab displays the cryptographic asset properties and host details.

6.1.3 HTTP and DNS

Click a cryptographic asset on the HTTP AND DNS tab to view its properties and associated violations.

NOTE

Use the Asset Type filter to distinguish between HTTP and DNS cryptographic details.

• The CRYPTOGRAPHIC ASSET DETAILS tab displays the cryptographic asset properties and host details.

7.0 Export Scanned Data

The EXPORT feature allows you to export the scanned assets from Fortanix Key Insight in Comma-Separated Values (CSV) format. Also, it provides flexibility, enabling you to download data for detailed analysis, audits, or reporting, and to access real-time status.

In the on-premises network’s Cryptographic Assets list view, click EXPORT to export the scanned data using any of the following options:

• Export current page: Exports all column data displayed on the current page in CSV format.

  NOTE

  You can export a maximum of 100 items at a time, based on the number of items specified in the Items per page drop down.

• Export all raw data: Export all available data shown in the certificate tables in CSV format. When you select this option, the Export All Raw Data dialog box opens. Review the information and click PROCEED to export all the data.

  NOTE

  After you start an export, you can track its progress in the Activities tab. The export status is recorded as an activity in Fortanix Key Insight. For more information, refer to Section 7.1: View Export Activities.

• Export selected rows: Exports the selected rows on the current page in CSV format. This option is disabled until you select one or more rows using the check box next to each row.

NOTE

• Only users with the Account Administrator and Group Administrator roles can perform the scanned data export.

• Multiple exports can run concurrently within the same account across different connections (manual import, cloud, on-premises, external key sources, and vendor applications).

7.1 View Export Activities

After you initiate the export process using Export All Raw Data, you can track the export status in the Activities menu located in the left navigation panel.

The Activities page displays the following details are available for each export activity:

• ACTIVITY NAME: Displays the name of the export activity.

• FILE NAME: Displays the name of the exported CSV file.

• STATUS: Indicates the current state of the export.

  The status can be one of the following:

  • Completed: The export completed successfully, and the CSV file will automatically download to the location specified on your local machine.

  • In Progress: The export is in progress, and you can cancel it using if required.

  • Cancelled: The export was cancelled, either because you switched accounts or cancelled the export while it was in progress.

  • Failed: The export could not be completed because of an error.

• CONNECTION: Displays the name of the connection associated with the export.

• CREATED AT: Displays the date and time when the export activity was created.

NOTE

• If you switch to a different account during export, the export is cancelled, and the cancellation is recorded in the Activities tab.

• If you navigate to a different solution (for example, Fortanix Identity and Access Management (IAM)), while the export is in progress, the export continues. However, the export activity is not displayed in the Activities tab. The export status is provided through a confirmation message.

• Avoid refreshing the web page while an export is in progress. If you refresh the page, a confirmation dialog box is displayed. If you confirm the refresh, the export is cancelled, and all related entries are removed from the Activities.