Sheet SYN-02 · Network Operations Manual
Standards, Vulnerability & Health
Tenant-defined compliance policies, known-exploited vulnerability matching, and the composite health score.
Synapse checks the inventory against the standard you define and against published vulnerabilities, then rolls both into health scores.
Compliance policies
A policy is a set of rules the tenant writes. Synapse ships no built-in standard. Scope each policy to one organization, one site, or every site with a given label.
Wi-Fi standardization is one policy type. It checks each site for a required set of SSIDs, can flag SSIDs outside that set as legacy, and exempts sites by label.
Each site in scope gets pass, fail, or not applicable, with the evidence behind the result. Results refresh after each sync, on the maintenance cycle, and on demand.
Vulnerabilities
Synapse matches devices against known-exploited and published vulnerabilities. Policy rules set which severities fail a device. Work known-exploited matches first: attackers already use them.
Health scores
Each site gets a score on four dimensions: health, compliance, vulnerability, and lifecycle. Synapse combines them into one weighted score, and you can change the weights. A dimension with no data shows as “no data”, not zero.
The refresh roadmap lists devices by end-of-life risk. Use it to plan hardware replacement.