Detailed information about objects presented on the network map are displayed in the details area. To display detailed information, you can use your mouse to select an object (if you want to view information about a group, you must first collapse the group).
The following information is displayed for nodes:
If a node represents a known asset, the details area displays the same information that is displayed in the assets table.
If a node represents one unknown device, the details area displays the MAC address and/or IP address of the device.
Number of nodes combined by this node under the current filter settings.
IP addresses – number of IP addresses of unknown devices and the first 100 IP addresses. This section is displayed if there are nodes with IP addresses among the nodes of unknown devices.
MAC addresses – number of MAC addresses of unknown devices and the first 100 MAC addresses. This section is displayed if there are nodes with MAC addresses among the nodes of unknown devices.
If a WAN node is selected, the following information is displayed:
Exclude defined addresses indicates that all assets whose addresses are included in the listed subnets are excluded from the asset group.
Subnets – section containing a list of subnet masks by which devices of an external network are identified.
The following information is displayed for groups:
Number of assets and groups within the selected group and its child groups of all nesting levels.
Path to the group in the asset group tree. If a group is in the top level of the hierarchy, Top-level group is displayed.
Information about the number of objects requiring attention within the selected group and its child groups of all nesting levels. If there are no such objects, the OK security state is displayed.
The following information is displayed for links:
Severity – icon corresponding to the maximum importance level of events associated with the link. If no event is associated with the link, No events is displayed. Events registered during the defined object filtering period are taken into account. However, the current status of events is not taken into account.
Sections containing basic information about the first and second sides of communication:
If the side of communication is a node of a known asset or a node of an unknown device, the section displays the name or address of the asset/device, category, and address information (for a known asset, address information is provided only for those network interfaces that were used during the communication).
If the side of communication is a collapsed group, the section displays the name of the group and the number of assets and child groups within it.
If the side of communication is a consolidated node of unknown devices, the section displays the Unknown devices node name and the number of nodes combined within this node.
If one of the sides of communication is a collapsed group, you will see the number of links that are designated by the selected link:
Total links – total number of links with assets of the collapsed group.
List showing the quantitative distribution of links based on the severity of their associated events (including the number of links not associated with any event). Next to list items are links for viewing detailed information about the items. You can click the To assets link to go to the Assets section and filter assets associated with links. You can click the To events link to go to the Events section and filter events associated with links.
Protocols – section containing a list of protocols used for communication. The volume of transmitted data calculated for detected network packets is specified for each protocol. This section is not displayed if one of the sides of communication is a consolidated node of unknown devices.