Set up Attack Surface Testing

Set up Attack Surface Testing by verifying permissions, accepting the EULA, and selecting targets.

To set up Attack Surface Testing for the first time, complete the following tasks:

1. Verify that you have edit permission for Vulnerability Testing.

   To check your permissions, go to Settings → Configurations → Access Management → Roles, select the role. Select the Components tab, and find Vulnerability Testing under Incident Response → Detections.
2. Accept the End-User Licensing Agreement (EULA).

   The EULA gives Cortex Xpanse permission to conduct attack surface testing scans. You only need to accept the EULA once. After accepting the EULA the Vulnerability Testing Configuration page will open automatically so you can select the targets for testing.
3. Select targets for attack surface testing.

   In this task, you'll select the directly-discovered services upon which Cortex Xpanse will run attack surface tests. After the initial set-up, you can update this set of targets anytime.

After you complete the set-up tasks, Cortex Xpanse will begin daily attack surface testing scans. You can perform the following post-setup tasks to access attack surface test results and change your attack surface testing configuration.

• View attack surface test results
• Enable new attack surface tests by default
• View attack surface tests
• View source IP addresses for Attack Surface Testing scans

Accept the End-User Licensing Agreement (EULA)

1. Navigate to Rules → Vulnerability Testing.
2. On the Welcome to Vulnerability Testing page, click Next.
3. Read the End-User Licensing Agreement and click Accept Terms.

After accepting the terms of the EULA, the Vulnerability Testing Configuration page will open where you can select the set of services to be tested.