Software

Use the Software Management Module to see a consolidated view of all installed software in the organization, from all sources across all devices. The Software page delivers increased management of your organization's software. It helps security, IT, and risk teams identify software assets across fleets of devices.

Click the Assets icon and from the left-pane, select Software.

The total number of unique devices on which Software was found is shown above the table. Click on the number of devices to open the devices on which Software was found on the Devices page.

The Software page opens, displaying the following columns:

• Adapter Connections - Displays the adapter source from which the software originates. Hover over the Adapter Connections column to see the adapter names for all the adapter connections. Axonius Catalog enrichment adds information about the name, vendor and category most commonly used.

• Installed Software: Name - Displays the name of the aggregated software data presented by the software name. Click a name of the software to open the Software Profile page that displays software versions and associated devices.

• Installed Software: Vendor - Displays the name of the software vendor.

• Installed Software: Version - Displays the software version. Click on the arrow at the top of the column to sort by version.

• Preferred Software Name - Axonius preferred name for the software, fetched from the Axonius Catalog if it exists there, otherwise, Axonius selects the best naming option from all the fetched names.

• Preferred Vendor Name- Axonius preferred name for the vendor, fetched from the Axonius Catalog if it exists there, otherwise, Axonius selects the best naming option from all the fetched names.

• Software Category - Displays a category for the software which is the most suitable category for that software enriched by Axonius Catalog.

• Device Count - Displays the number of devices in which the software is installed. When you click on Device Count, the Devices page opens with the devices affected by this software.

• Tags - Displays one or more user-defined labels for the software. Refer to Working with Tags to learn more about adding tags.

• Approval Status - Indicates whether this software is Approved, or Not Approved. See Software Approval List

• First Fetch Time - Displays the timestamp when Axonius first found the software. (this column is not displayed by default).

• Version Count - Version Count shows the number of software versions that a software has. This field can be queried, using <, > and =. Use the Version Count field in software to help identify software that have old versions of software on them as follows:

  1. Create a query where version count is greater than the number of versions back that you permit on your system (for instance 2 versions)
  2. Then from the profile pages of these software you can see the Versions sorted in the versions tab, or see the associated devices tab and filter out the last two versions to see all devices which have old versions installed on them. These can then be seen on the devices tab, or exported as a CSV file

Click the arrow next to any of the fields to see more details about that field.

Not all of the fields are displayed by default. Use Edit Columns to add or remove columns. For more information, see Setting Page Columns Display.

Click on Software Approval List to manage a Software Approval List.

Click on a software item, the Software Profile page opens. The Software Profile page provides detailed information about the Software selected.

Creating Queries on Software

The Query Wizard on the Software page allows you to create a unique set of queries. Software queries are created on two levels. The first level of the query focuses on software parameters. You can query fields such as the software version, adapter connections or device counts. You can add additional levels to the query, such as querying by network interface and vulnerable software. Use these queries to find out which software exists with asset context in your environment. Or how many devices have a particular software.

To configure the Query Wizard on the Software page

1. Build a query on the Show Software field on the table, for instance Installed Software:Vendor.
2. Filter the software displayed by a Device query, and thus only show the applications in your environment by a defined Device query, for instance by OS:Type.

After running the query, the table shows the software queried, filtered by the devices they affect.

Saving Queries

• Click Save As to save the query.
• When you click Saved Queries and open the Queries page, the software queries you created are displayed on the Queries page.

Refer to Creating Queries with the Queries Wizard to learn more about creating queries.

Last Updated Indication and Refresh Query

When query caching is enabled, and query results are retrieved from the cache, the Last updated indication is displayed. This indication specifies the last time the query was performed and from when the displayed query results were updated.

Click (Refresh Query) to run the query again to recalculate the query results.

Export Software Data to CSV

You can export the Software data to CSV. Refer to Exporting Asset Data to CSV.

Adding Custom Data to Software

You can add custom fields to one or more Software assets at the same time.
Mouse over a row, or select one or more Software assets and from the More Actions menu choose Add Custom Fields.

Refer to Working with Custom Data to learn about adding custom fields.

Add Tags to Software

Use tags to assign context to your assets for granular filters and queries. Apply new or existing tags to the selected software. The list of selected tags is applied to all selected software.

Refer to Working with Tags to learn about adding Tags to Software.

Software Approval List

Click Software Approval List to manage the Software Approval List of approved and not-approved software.

Displaying Historical Data

Axonius saves daily “snapshots” of all the collected data, which you can view for any query on the Software page.

To view query results for a specific date, click 'Display by Date' on the top menu above the Software table.

A date picker control opens, enabling you to select the desired date. By default, the latest day for which data was collected is displayed. Note that you can only select one date.

Notice that only dates with collected data are enabled as options for choice. The System then displays the historical snapshot data of the page as it was presented on the date you selected.

To clear the historical view and set back to the latest, hover over the displayed date and click on the 'X' next to the displayed date.

Using Software Queries in Enforcement Actions

Queries created for the Software Management Module can be used as queries in the following enforcement set actions:

• Axonius - Push System Notification
• Axonius - Send Email
• Email - Send per Asset
• Axonius - Add Custom Data to Assets
• Axonius - Remove Custom Data from Assets
• Axonius - Add Tag
• Axonius - Remove Tag
• Manage Custom Enrichment - Enrich assets with CSV file
• Cherwell - Create Incident
• Cherwell - Create Incident per Asset
• Freshservice - Create Ticket
• Freshservice - Create Ticket per Asset
• Jira - Create Issue
• Jira - Create Issue per Asset
• Jira Service Management - Create Issue
• Jira Service Management - Create Issue per Asset
• ServiceNow - Create Incident
• ServiceNow - Create Incident per Asset

Enforce - Create New Enforcement

You can create a new enforcement set directly from the Software page with a Main Action that will run on the entities you selected. For more details refer to Enforce - Create Enforcement.