There are 2 main asset statuses in Kenna which are used to filter assets in the Explore UI: Active and Inactive. By default, only Active assets are shown in the UI and returned via the API.
Assets remain in Kenna indefinitely. It is important that the Kenna Asset Setting is configured so that decommissioned assets flip to inactive on the Kenna platform.
Under the gear icon, choose Asset Setting to configure your asset expiry rule:
In choosing a value for this system wide rule one is trying to achieve a balance: 1. remove truly decommissioned assets so that they do not inaccurately inflate risk scores without 2. removing assets that legitimately exist but may have been missed by a scan in affect hiding risk.
A good general rule of thumb: Scanning Frequency X 2 + 1.
If you scan weekly: (7 x 2) + 1 = 15 days.
30 days is the most common setting across Kenna clients.
How Automatic Asset Expiration Works
Using the Asset Setting, a nightly job is run on the Kenna platform that will automatically flip assets to inactive if they have not been seen in a time period equal to the asset setting. Asset will also automatically flip back to Active if they are again seen by the scanner.
Using the automated processing ensures that are added to, and removed from, risk scores and reporting in accordance with the Asset Setting rule you have configured.
Manual status changes
There may be cases where assets need to be removed from the automated processing. Examples:
- Reliable Decommissioning process feeds assets to Kenna admins allowing assets to be removed sooner than the Asset Settings
- Asset types are pulled into Kenna that are not going to be managed via the Kenna platform - phone systems, camera etc
- Development assets are scanned less frequently and would be inappropriately flipped to inactive based on the Asset Setting - Asset Setting is 30 days but lab assets are scanned quarterly.
Asset Status may be manually adjusted via the UI however, assets that have been manually adjusted will NO LONGER be processed in the nightly asset activity processing using the Asset Setting.
Individuals with the necessary privileges can change Asset Status by first selecting the asset(s) using the check boxes to the left of the asset which will reveal the Set Status option:
To set a static status choose Active or Inactive. Once selected the assets will be on Status Override and the asset status will NOT change unless it is again manually updated.
The icon at the left next to the checkbox will reveal the asset status and source:
You can hover for a pop up describing the status.
Asset Status Summary
There are a total of 4 possible status settings in Kenna:
For reporting and filter options assets are considered either Active or Inactive.
For asset expiry considerations assets manually set will NOT be included in any automated processing.
To restore assets to the default status use the Remove Override button under Set Status.
Finding Manually Overridden Assets
Not sure which assets have had their status manually set? Use the filter under Asset Filters: Status Set Manually = "Yes".