Patent ID: 8925093
Filing Date: 2014-12-30
Classification: G06F,H04L

Abstract:
1. A method of conducting a scan on an endpoint system across an open computer network, the endpoint system being protected from the open computer network by a firewall, the method comprising: providing a scanner engine in a computer server in communication with the open computer network; providing a scanner agent installed on the endpoint system in communication with the open computer network through the firewall; establishing a secure layer connection between the scanner engine and the scanner agent without requiring credentialed access through an open firewall port; sending, from the scanner engine to the scanner agent installed on the endpoint system, commands for collecting data from the endpoint system; collecting data based on the commands via the secure layer connection regarding the endpoint system using the scanner agent, the collected data including at least one of system configuration information, system services information, or file system information; receiving the collected data from the scanner agent at the scanner engine via the secure layer connection; analyzing the collected data with the scanner engine to assess a current security vulnerability posture of the endpoint system, and determining any updates for the endpoint system from the analysis; and sending the updates via the secure layer connection to the scanner agent for installation on the endpoint system.