Configuring Asset Management

Kaspersky Industrial CyberSecurity for Networks lets you monitor the assets of a company as represented by its industrial network devices. Devices are identified by the application based on their MAC- and/or IP addresses. The application can receive device data when doing the following:

For asset management purposes, the application generates a devices table and subnets table. The devices table contains device information that was manually provided or obtained automatically by the application.

Subnets that are known to the application are used to verify IP addresses detected by the application. Depending on the type of subnet that a detected IP address belongs to, the application may take different actions for asset management and device interaction control.

Only information that can be identified by the application may be automatically obtained and updated (for example, address information of a device).

Subnets are automatically added only based on data received from EPP applications. The application automatically adds detected subnets to the subnets table if they are nested within a subnet for which automatic addition of subnets is enabled.

For device activity detection and automatic update of information, the corresponding Asset Management methods must be enabled. If necessary, you can manually specify the values of specific data and disable their automatic update to lock the current values (for example, you can lock the device category if the currently defined category differs from the one that is determined automatically).

Some device information must be specified manually because it cannot be automatically updated. For example, you can save specific device information in the device table, and add any absent criteria for sorting and filtering devices. You can also use manually defined information to arrange devices in various groups in the group tree, or filter and search for devices based on device labels.

You can configure asset management and edit device information on the Server web interface page in the Assets section. You can also view information about the interactions between devices and perform various actions with devices when working with the network map. To conveniently present information about interactions between devices and to enable automatic grouping of devices by subnet, you can generate lists of subnets in the application and indicate the subnet structure of your company's network.

In this section:

Asset Management methods and modes

Selecting the applied methods and changing the Asset Management mode

Selecting sources for device vulnerability monitoring

Manually adding devices

Merging devices

Deleting devices

Manually changing the statuses of devices

Generating a list of subnets for asset management

Viewing information about devices with IP addresses from the selected subnets

About arranging devices into groups

Automatic grouping of devices based on a specific criterion

Manually arranging devices into groups

Moving nodes and groups to other groups on the network map

Manually creating a device group tree

Adding and removing labels for devices

Editing device information

Adding, editing and deleting custom fields for a device

Page top