AlienApp for DDI Frontline VM Orchestration

The AlienApp for DDI Frontline VM provides a set of orchestration actions that you can use to identify vulnerabilities and manage assets in your USM Anywhere environment. The following table lists the available actions from the AlienApp.

Actions for the AlienApp for DDI Frontline VM
Action Description
Run Scan

Use DDI Frontline VM to scan asset for vulnerabilities.

Scanner, scan policies, business groups and asset groups can all be specified here.

Scans can also be scheduled for a specific date and time.

Run Scan by Label

Use DDI Frontline VM to scan asset for vulnerabilities based on a specific DDI label.

Scanner, scan policies, business groups, and asset groups can all be specified here.

Add Asset to Static Asset Group

Add asset to a static DDI Frontline VM asset group.

Add Label to Asset Add a DDI label and, optionally, label color to an IP range.

To view information about these actions in USM Anywhere

  1. In USM Anywhere, go to Data Sources > AlienApps.
  2. Click the Available Apps tab.
  3. Search for the AlienApp, and then click the tile.
  4. Click the Actions tab to display information for the supported actions.
  5. Click the History tab to display information about the executed orchestration actions.

Launch Actions from USM Anywhere

Digital Defense Incorporated (DDI) Frontline Vulnerability Manager (VM) scans can be performed from the app's Action page (AlienApps DDI Frontline VM > Actions) by clicking Run next to the action. Alternately, you can run DDI Frontline VM actions from the Vulnerabilities or Assets pages.

To launch a DDI Frontline VM action from a vulnerability

  1. Go to Environment > Vulnerabilities.
  2. Click the alarm or event to open the details.
  3. Click Select Action.

  4. In the Select Action dialog box, select the DDI Frontline VM tile.

  5. For the App Action, select the action you want to run.

    Additional fields will be populated based on the action you've selected. Fill out the necessary fields for the app action.

  6. Fill out the details for the scan action you selected.
  7. Click Run.

    After USM Anywhere initiates the action for an alarm or event, it displays a confirmation dialog box.

To launch a DDI Frontline VM scan for an asset

  1. Go to Environment > Assets.
  2. Do one of the following:

    • Next to the asset name that you want to scan, click the icon and select Full Details, and then select Actions > Scan with AlienApp.

    • Next to the asset name that you want to scan, click the icon that you want to scan and select Scan with AlienApp.
  3. For the App Action, select the action you want to run.

    Additional fields will be populated based on the action you've selected. Fill out the necessary fields for the app action.

  4. Fill out the details for the scan action you selected.
  5. Click Run.

    After USM Anywhere initiates the action for an alarm or event, it displays a confirmation dialog box.