Network vulnerability assessment scanners are excellent for identifying vulnerabilities present but the results often leave organizations with more data than they can effectively handle. And results of these scans alone are difficult to prioritize since scanners are unable to identify which hosts are exposed to untrusted networks.

The optimal way to overcome these challenges is to analyze the results of a vulnerability scan in the context of the network. In this context you can analyze the relationships between hosts and untrusted networks by understanding the network architecture and access policies that define the relationships.