Activate Asset and Attack Surface View

Common Vulnerability and Exposures (CVE) is a standardized list of publicly known vulnerabilities and security exposures. FortiCWP integrates AWS Inspector CVE analysis using Inspector Agents installed on EC2 instances. After CVE setup is completed, the CVE findings will be displayed in Resources > Asset View.

Network Reachability is another vulnerability findings provided by AWS, it analyzes network configurations for internet ports that are reachable from the network entities such as load balancers, virtual gateway, etc. FortiCWP integrates these network reachable findings and displayed in Resources > Attack Surface View.

Follow steps below to create Assessment Templates to generate CVE analysis and Network Reachability findings.

Create EC2 role for AWS SSM agent

Attach the EC2 role to all EC2 instances

Create an Assessment Target on AWS Inspector

Create Assessment Template for Assessment Run