If you're on a Mandiant Security Validation (MSV) release prior to 4.12.1.0, you may notice that a license expired watermark appears on the Network Map page on your Director.
Network Map Page with License Expired Watermark on an MSV Director
This watermark is related to the software that renders the Network Map and does not affect functionality of the product.
Use one of the following options to fix the watermark issue permanently:
- Update to the latest release (4.12.1.0 or later) or migrate to Mandiant Advantage Security Validation (MA-SV).
- As an additional option, you can upgrade to release 4.12.0.1, which provides a fix for this issue and if you need more time to complete the update to 4.12.1.0 or later.
Overview
The map provides a graphical display of Security Zones, Actors contained in each zone, security technologies identified when Jobs are run, and the relationships between elements.
The map can be accessed by selecting Environment > Map. A version of the map is also used when running Sequences and Evaluations, and on the AEDA Dashboard.
Elements that appear on the map are described in the following table:
| Icon | Description |
|---|---|
 | Represents a collapsed Security Zone or Protected Theater. |
 | Represents a collapsed Security Zone that includes "internet" in its name. |
 | Represents an expanded Security Zone or Protected Theater, which shows the Zone's Actors. These are expanded by default. |
| varies | Actors are represented as a circle with their OS logo contained in the circle. If there is an icon on the edge of the circle, a security technology was identified when the Actor was installed. |
 | Represents an Actor that doesn't have a Windows, Mac, Ubuntu, or CentOS/RHEL (RHEL currently uses the CentOS logo) operating system. |
| varies | Represents Security Technologies identified when Jobs run (security technology logos). |
 | Represents general communication information. |
 | Represents communication information, including the direction of communication, for the selected Actor. |
General Map Interactivity
The map is completely interactive.
- The map has several pre-defined layouts you can use. Apply these by selecting the layout from the Update Map Layout button or by using their keyboard shortcuts.
You do not need to press the keys at the same time. You can type L first and then the number to apply the layout.
- Standard: L+1
- Organic: L+2
- Sequential: L+3
- Lens: L+4
- Structural: L+5
- Tweak: L+6
- Multiple objects on the map can be selected using standard keyboard and mouse combinations.
- When an object on the map is selected, it has a green border.
If you manually make changes to the map and want to return it to the layout you select, click Refresh Layout.
If you have collapsed Zones or Protected theaters, they will remain collapsed after you click Refresh Layout.
- Zones and Protected Theaters can be expanded or collapsed to show the Actors.
- Double-click on the Zone to expand or collapse it.
- When Zones are collapsed, a number representing the number of Actors contained in the zone is displayed.
- Actor information can be viewed by right-clicking on the Actor.
- The Actor's OS, IP addresses (interfaces), and Security Zone are listed.
- A Show Connected Network option, which when clicked will highlight the network communication on the map and dim the elements not involved.
Actor details
- Network Security Technology information can be viewed by right-clicking on the Security Technology (or by Clicking on the while pressing the Alt/Cmd key). The following information is included:
- A description of the Security Technology, including what integration detected it and how
- Its interfaces
- The prevention enabled status (Unknown, Enabled, or Not Blocking)
- A Show Connected Network option, which when clicked will highlight the network communication on the map and dim the elements not involved.
Security Technology details
