Re: Server asset inventory tool

[Paul Chauvet <chauvetp () NEWPALTZ EDU>]

Hi Mandi,

Since the vast majority of our servers are virtual within VMWare - I use a PowerCLI script that exports our VMWare 
asset inventory as a CSV.  One of our programmers uses that file to update our asset inventory in TeamDynamix (our ITSM 
system).

When a new asset is added - I take care of the things that VMWare doesn't know about (i.e. risk/criticality 
classifications, whether FIM is in use, backups are in place, logs are being forwarded to the SIEM, etc.).

Physical servers are few and far between so they get added manually as part of a workflow for server commissioning.

Paul Chauvet, CISSP
Information Security Officer
State University of New York at New Paltz
845-257-3828
chauvetp () newpaltz edu<mailto:chauvetp () newpaltz edu>
[emlogo]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Mandi Witkovsky
Sent: Wednesday, April 24, 2019 9:02 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Server asset inventory tool

I'm wondering what everyone else is using to gather and maintain a server asset inventory.  Manual processes or 
something automated?  If automated, what are you using, what kind of data does it report on, what do you like or not 
like about the tool?

Thanks,
mandi