Core Discovery Metrics

The Core Discovery Metrics dashboard brings together essential information about your network.

The charts provide actionable data points to improve your network situational awareness and security.

This page is your default dashboard on log in. It also is the landing page when you click the Asset Manager logo or open a new tab in your browser.

Device Discovered per Target List

Is Asset Manager reaching your network segments? Use this table to view the devices discovered in each CIDR defined in your Zone Discovery Spaces.

Make note of CIDRs with a small quantity of devices and investigate why Asset Manager is not fully reaching the network.

DNS Summary

Internal DNS servers should be protected from external threats and should not be exposed to the Internet.

The DNS Summary Chart shows the proportion of IPs in a zone "named" by a particular Domain Name Service (DNS).

Drill down to the DNS Details table which shows the properties of the domain names (i.e., IP addresses, DNS names and Zone Names).

Verify each domain in your network is isolated from public-facing DNS and protected with appropriate security controls.

SNMP Credential Usage

If default community strings are not modified it could lead to a compromise of sensitive data.

This chart shows all V2 and V3 SNMP credentials responding in your network and the amount of devices responding to those SNMP credentials.

Ensure default SNMP community strings are replaced with complex passwords.

Forward Device Summary

A misconfiguration of a device can be used as a pathway for a threat actor to move across your network.

This chart displays the proportion of forwarding devices in your network of a particular device type. In the Asset Manager GUI, you can hover over any pie slice to see a count. Drill down further to see identifying details on the forwarding devices.

Review discovered forwarders list and verify the devices have proper configuration.

IP Utilization

Effective segmentation limits the ability of an attacker to move laterally across the network. The IP Utilization bar chart shows discovered spaces in your network. You can view the spaces by first, second, or third CIDR blocks.

Use the categorized first, second, and third CIDR blocks to help audit your networks.

Known Networks

Unknown Networks can supply a home for bad actors to perform malicious activity. This chart displays the proportion of found networks listed in the user's Known List. By hovering over a section of the pie chart on the dashboard GUI, you'll see a count for each category represented in the zone.

Drill down to the table to show device details of the Known and Unknown Networks.

Inventory the unknown networks and disable access to the network if not needed. Or add to your zone Known Networks to properly monitor.

Open Ports Summary

Only the necessary ports should be open for services that are explicitly required by your organization.

This chart quickly summarizes all the open ports in your network and the number of devices responding on the open port. You can further drill down in the chart for more details on all the devices responding to that specific port.

To protect your network, all non-necessary ports should be closed or filtered.

Expired Certificates Summary

Expired certificates can be exploited for man-in-the-middle attacks allowing attackers to impersonate legitimate websites or devices.

Easily view your expired certificates and soon to be expired certificates with the Expired Certificates Summary Bar Chart. Identify certificates that are nearing expiration and replace them.

Public / Private IPs per Zone

Track your private and public IPs that Asset Manager found in each zone. Verify the listed public IP space is known to your organization and properly recorded.

End Points Profiled per Zone

Improve your profiling by adding SNMP credentials, configuring WMI, and enabling Profile Discovery.