Automatically adding and updating devices

The application can automatically add devices to the table and update information about devices. To automatically add and update devices in Kaspersky Industrial CyberSecurity for Networks, you must enable the following asset management methods:

• Device activity detection When using this method, the application adds newly detected devices to the table based on the obtained MAC- and/or IP addresses of the devices. If the application detects activity of an already known device, it may change its status depending on the current asset management mode.
• Device Information Detection When using this method, the application updates information about known devices based on data received from traffic or from EPP applications. Based on data received from traffic, the application updates the information for which automatic updates are enabled in the device settings (this is enabled by default until an application user manually changes a value). If device information detection is disabled, the application does not update or augment available device information based on data received from traffic or from EPP applications.

When adding a device, the application assigns a device name based on the default template: Device <value of the internal device counter>. The value of the internal counter in the device name may differ from the device ID that is displayed in the Device ID column.

Using device information detection, the application can update a device name after receiving the following information:

• Device model name.
• Network name used to represent the device on the network (the network name of the device takes priority during an update).

The application can automatically update information related to the vendors of network equipment based on the MAC addresses of devices. To identify vendors based on MAC addresses, the application compares the MAC addresses of devices with the address ranges that are registered in the public database of the international Institute of Electrical and Electronics Engineers (IEEE). If a network equipment vendor is identified by MAC address, the application uses the same vendor name that is presented in the IEEE database.

After the application is installed, it uses a copy of the IEEE database containing information about MAC addresses and vendors that was up to date when the current version of the application was released. You can keep the local copy of the IEEE database up to date by installing updates.

Page top