New and changed information

Cyber Vision New UI is the default interface for Cisco Cyber Vision Center. When you sign in, Cyber Vision opens the new UI automatically.

The Network Scanner alert type identifies network reconnaissance and scanning attempts. IP addresses specified in the Allowed Scanner list are excluded and do not generate alerts.

For more information, see Alerts.

Cisco Cyber Vision monitors the assets that are part of the alert rules, and raises an alert when any of those assets are involved in selected behaviors within the configured time window.

For more information, see Alerts.

The Communications page organizes map data by asset groups and displays communications at the asset-interface level. You can view details for asset interfaces, asset groups, and communications within an asset group. The control panel provides filter options and display settings.

For more information, see Communication maps.

Asset page organizes information into the Summary, Alerts, Vulnerabilities, Communications, Behaviors, Services, Properties, and Interfaces tabs. The Summary page displays cards that provide a quick, high-level overview of the asset.

For more information, see Assets.

The Sensor Management extension is no longer available. Sensors that were previously deployed through the Sensor Management extension are now fully managed from the Sensors Management page in the new UI.

For more information, see Sensor management frameworks.

The Network Definition page has been enhanced to support new network definitions. Network detection runs automatically at regular intervals, with an option for manual, on-demand execution.

For more information, see Network definition.

Cyber Vision records supported user authentication and configuration actions in the audit log. Authorized users can review and export audit records and configure the retention period from 7 through 365 days. The default retention period is 90 days.