Regarding the improvement of Axonius, it goes halfway for both the tool and the user. If we set it up quickly from our end, and if the AD groups and all other groups assigned to tag the assets have been tagged correctly, Axonius could not show an error. But we are still sorting out our segregation for assets as well. However, Axonius can't pull out the exact reports, but there is a way around this, where we can use the built-in queries. For example, we have CentOS systems, and within CentOS, we have tagged assets with vulnerabilities, but these assets do not appear in Axonius. As an alternative, what we do for this is write a query to find the vulnerability of assets that are tagged within CentOS systems. I would say both the tool and the user must work together to get good results.
