Configuring and starting active polling

Expand all | Collapse all

You can configure and run active polling for one device or simultaneously for multiple devices from the devices table.

The ability to run active polls is available after adding a license key.

Active polling is configured and started by using a wizard. The Active Polling Configuration Wizard automatically determines the available active polling methods depending on the selected devices and the selected settings that you need to receive. Active polling is started at the final step of the wizard.

The active polling configuration wizard can be invoked in the following ways:

• Invoking the wizard when working with the devices table
  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select the Assets section.
  3. On the Devices tab, select the devices for which you want to run active polling. You can select no more than 16 devices when configuring and running active polling.
  4. In the toolbar above the devices table, open the Perform drop-down list and select Active polling.

     The active polling configuration wizard window opens.

  5. If no application user has previously conducted active polling of devices, the wizard window will show a warning regarding the specifics of active polling. Carefully read the warning and confirm that you accept the risks of potential impacts when using the active polling module.
  6. In the Select parameters section of the wizard, select the check boxes for the specific device information that you want to update using active polling. You can also enable risk detection (the Risks check box) and discovery of topology settings for devices (the Topology settings check box).
  7. In the Select polling methods section of the wizard, select the check boxes for the specific methods that you want to use for getting device information, risk detection, and/or reading topology settings.

     The available methods are grouped based on the connectors that provide the capabilities for active polling of devices. The list contains only the methods that are capable of obtaining the selected information. If a connector cannot be used for active polling of selected devices, available methods are not displayed for this connector (for example, if the connector is disabled or if an address space not containing addresses of selected devices is selected for the connector).

  8. If required, in the Configure / run section of the wizard, configure the operation settings for each connector methods (for example, the Polling via SSH method requires specifying a port, and a user name and password to connect).

     Methods that require configuring settings appear as expanded blocks. If setting configuration is not required for all connector methods (the default settings are used or no settings are provided for this method), a green icon is displayed next to the connector name.

  9. Click Start.

     The application starts the process of active device polling.

  10. In the Finish section of the wizard, click the Close button.

      Information about the active polling is displayed in the list of background operations. When this process is complete, the polling results will be available for viewing.

  11. To view the results of active polling:
      1. Click the button in the menu of the application web interface.

         The list of background operations appears. The list contains separate background operations for each connector that is used for active polling.

      2. After completing each operation, click Show results to get the results of the active polling conducted using the corresponding connector.
• Invoking the wizard when working with the network interactions map and the topology map

  When working with the network interactions map and the topology map, you can call the active polling configuration wizard for nodes corresponding to the devices known to the application.

  To invoke the active polling configuration wizard and run active polling when working with maps:

  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select the Network map section.
  3. On the Network interactions map or Topology map tab, select one or more nodes for which you want to run active polling of devices. The nodes must represent known devices. You can select no more than 16 devices when configuring and running active polling.

     To select multiple nodes, perform one of the following actions:

     • Hold down the SHIFT key and use your mouse to select a rectangular area containing the relevant nodes.
     • Hold down the CTRL key and use your mouse to select the relevant nodes.
  4. In the toolbar above the network interaction map or the topology map, open the Perform drop-down list and select Active polling.

     The active polling configuration wizard window opens.

  5. If no application user has previously conducted active polling of devices, the wizard window will show a warning regarding the specifics of active polling. Carefully read the warning and confirm that you accept the risks of potential impacts when using the active polling module.
  6. In the Select parameters section of the wizard, select the check boxes for the specific device information that you want to update using active polling. You can also enable risk detection (the Risks check box) and discovery of topology settings for devices (the Topology settings check box).
  7. In the Select polling methods section of the wizard, select the check boxes for the specific methods that you want to use for getting device information, risk detection, and/or reading topology settings.

     The available methods are grouped based on the connectors that provide the capabilities for active polling of devices. The list contains only the methods that are capable of obtaining the selected information. If a connector cannot be used for active polling of selected devices, available methods are not displayed for this connector (for example, if the connector is disabled or if an address space not containing addresses of selected devices is selected for the connector).

  8. If required, in the Configure / run section of the wizard, configure the operation settings for each connector methods (for example, the Polling via SSH method requires specifying a port, and a user name and password to connect).

     Methods that require configuring settings appear as expanded blocks. If setting configuration is not required for all connector methods (the default settings are used or no settings are provided for this method), a green icon is displayed next to the connector name.

  9. Click Start.

     The application starts the process of active device polling.

  10. In the Finish section of the wizard, click the Close button.

      Information about the running active polling operation is displayed in the list of background operations. When this process is complete, the polling results will be available for viewing.

  11. To view the results of active polling:
      1. Click the button in the menu of the application web interface.

         The list of background operations appears. The list contains separate background operations for each connector that is used for active polling.

      2. After completing each operation, click Show results to get the results of the active polling conducted using the corresponding connector.