Kaspersky Industrial CyberSecurity for Networks lets you monitor the assets of a company as represented by its industrial network devices. Devices are identified by the application based on their MAC- and/or IP addresses in network interactions. The application additionally checks IP addresses of devices to determine if they belong to known subnets that are also used for asset management. For asset management purposes, the application generates a devices table and subnets table.
The devices table contains device information that was manually provided or obtained automatically during traffic analysis.
Only information that can be identified during traffic analysis can be automatically obtained and updated (for example, address information of a device). For device activity detection and automatic update of information, the corresponding Asset Management methods must be enabled. If necessary, you can manually specify the values of specific data and disable their automatic update to lock the current values (for example, you can lock the device category if the currently defined category differs from the one that is determined automatically).
Some information must be specified manually because it cannot be automatically updated. For example, you can save specific information about devices in the table, and add absent criteria for sorting and filtering devices. You can also use manually defined information to arrange devices in various groups in the group tree, or filter and search for devices based on device labels.
You can configure asset management and edit device information on the Server web interface page in the Assets section. You can also view information about the interactions between devices and perform various actions with devices when working with the network map. To conveniently present information about interactions between devices and to enable automatic grouping of devices by subnet, you can generate lists of subnets in the application and indicate the subnet structure of your company's network.