The Vulnerability Management Architecture

ManageEngine Vulnerability Manager Plus is a cloud-based solution that provides continuous identification, assessment, and remediation of vulnerabilities across an organization’s IT environment. It performs real-time vulnerability scans, automates patch management for operating systems and third-party applications, monitors compliance with security standards, and delivers detailed reports and insights to support timely remediation. The solution also includes a Quarantine capability that isolates high-risk or compromised endpoints to prevent potential threats from spreading across the network. Overall, it ensures effective protection of endpoints and servers while streamlining security and compliance management.

The Vulnerability Manager Plus Cloud Architecture consists of the following components:

• Security Research Team

• Central Repository Server

• Distribution Server

• Active Directory

 Fig: Vulnerability Manager Plus Cloud Architecture

Security Research Team

The Security Research Team at Zoho Corp. plays a vital role in maintaining cybersecurity as they . They continuously probe the internet to:

• Obtain vulnerability information along with its CVE ID, CVSS scores, severity, details on exploit code and patches.
• Download Microsoft, Apple, Linux and other third-party patches from respective vendor sites.
• Derive security configurations for systems and hardening guidelines for servers from widely trusted benchmarks such as CIS and STIG.
• Obtain information on software such as End-of-Life, Remote Desktop sharing, and Peer-to-Peer software that are deemed unsafe by itself.
• Maintain 90+ CIS benchmarks for compliance audits

Then the authenticity and functional correctness of the patches are tested and correlated with the corresponding vulnerability it addresses.