Kaspersky Industrial CyberSecurity for Networks

Viewing details about objects

March 22, 2024

ID 176869

Detailed information about objects on the network interactions map are displayed in the details area. To display detailed information, you can use your mouse to select an object (if you want to view information about a group, you must first collapse the group).

The following information is displayed for nodes:

  • If a node represents a known device, the details area displays the same information that is displayed in the devices table.
  • If a node represents one unknown device, the details area displays the MAC address and/or IP address of the device (including the names of address spaces if additional address spaces were added to the application).
  • If a consolidated node of unknown devices is selected, the following information is displayed:
    • Number of nodes combined by this node under the current filter settings.
    • IP addresses – number of IP addresses of unknown devices and the first 100 IP addresses (including the names of address spaces if additional address spaces were added to the application). This section is displayed if there are nodes with IP addresses among the nodes of unknown devices.
    • MAC addresses – number of MAC addresses of unknown devices and the first 100 MAC addresses (including the names of address spaces if additional address spaces were added to the application). This section is displayed if there are nodes with MAC addresses among the nodes of unknown devices.
  • If a WAN node is selected, the following information is displayed:
    • Exclude defined addresses indicates that all devices whose addresses are included in the listed subnets are excluded from the device group.
    • Subnets – section containing a list of known subnets indicated as Public (external networks).

The following information is displayed for groups:

  • Parent group – path to the group in the device group tree. If a group belongs to the top hierarchy level, the N/A (this is a top-level group) level is displayed.
  • Number of devices and groups within the selected group and its child groups of all nesting levels.
  • Information about the number of objects with issues within the selected group and its child groups of all nesting levels. If there are no such objects, the OK security state is displayed.

The following information is displayed for links:

  • Severity – icon corresponding to the maximum severity level of events associated with the link. If no event is associated with the link, No events is displayed. Events registered during the defined object filtering period are taken into account. However, the current status of events is not taken into account.
  • Sections containing basic information about the first and second sides of communication:
    • If the side of communication is a node of a known device or a node of an unknown device, the section displays the name or address of the device/device, category, and address information (for a known device, address information is provided only for those network interfaces that were used during the communication). The device status is also displayed for known devices.
    • If the side of communication is a collapsed group, the section displays the name of the group and the number of devices and child groups within it.
    • If the side of communication is a consolidated node of unknown devices, the section displays the Unknown devices node name and the number of nodes combined within this node.
  • Protocols – section containing a list of protocols used for communication. The volume of transmitted data calculated for detected network packets is specified for each protocol. This section is not displayed if one of the sides of communication is a consolidated node of unknown devices.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.