Viewing information about nodes with application components installed and about network interfaces on nodes

Users with the Administrator role and users with the Operator role can both view information about nodes with application components installed and about network interfaces on nodes.

To view information about nodes and network interfaces:

Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface.
Select Settings → Deployment.
The web interface window displays node tiles (on the left) and network interface tiles detected on these nodes (on the right of each node).
If you want to view detailed information about a node or network interface, select the tile of the relevant node or network interface.
The details area appears in the right part of the web interface window.

Displayed information about nodes with application components installed

A node tile displays the following information:

Current node status.
- OK. The node is available, and no application messages about non-critical malfunctions or disrupted operation were received from this node.
- Non-critical malfunction. The node is available, and application messages with the Unknown or Malfunction status were received from it.
- Operation disrupted. The node is available, and application messages with the Moderate malfunction, Critical malfunction or Fatal malfunction status were received from this node.
- No connection. The node is unavailable.
Node name.
Application component installed on the node: Server or Sensor.
IP address for connecting to the node (address 0.0.0.0 corresponds to all possible IP addresses on the computer).
The current mode of the technologies for which the operating mode can be selected. The tile contains the name of the mode: Learning or Monitoring, if all technologies operate in this mode. If different modes are selected for the technologies, the Mixed value is displayed.
If the inheritance of Server technologies is disabled for a sensor, the icon is displayed.

How to view the node information in the details area

The details area displays the following information for the selected node:

Node name.
The Manage technologies tab displays the list of technologies and methods that can be enabled or disabled on the node.
For the technologies with a selectable operating mode, the current mode is displayed: Learning or Monitoring. If learning mode is enabled, the date and time of the automatic switching to the monitoring mode are displayed to the right of the mode name (the date and time are not displayed if the time of the automatic switching is not set).
The following information is displayed on the Settings tab:
- Status – current status of the node indicated by an icon and text description (like in the node tile).
- Node type – application component installed on the node: Server or Sensor.
- Disk space currently used by the application – disk space occupied by application files. This includes the installed files and files that are created while the application is running.
- Maximum disk space that can be used by the application – disk space that can be occupied by application files. This includes the installed files and the sum of all volume limits defined in data storage rules. This value cannot exceed the available disk space.
- Occupied on disk – disk space used by all files. This includes application files and files of the operating system and other applications. This volume of space is calculated on the drive that contains the /var/ folder in the file system of the node.
- Free disk space – disk space that is not used by files. This volume of space is calculated on the drive that contains the /var/ folder in the file system of the node.
- Total disk space – total volume of disk space on the drive that contains the /var/ folder in the file system of the node.
- Inheritance of technologies—a flag indicating if the inheritance of Server technologies is enabled or disabled (only for the sensor node).
- Retention rules—current and maximum values of the following settings: volume, number of items, and storage time of the application data.

Displayed information about network interfaces

A network interface tile displays the following information:

Icon showing if a network cable is connected to the Ethernet port of the network interface:
- – the network cable is connected.
- – the network cable is disconnected.
The icon blinks when Ethernet port blink mode is enabled.
Network interface name in the operating system.
MAC address.
Rate of incoming traffic received by the network interface.
Information about the monitoring point (if one was added):
- Current status of the monitoring point:
  - OK. The monitoring point is available.
  - Switchover. The operating mode of the monitoring point is being changed.
  - Error. An error was detected when switching over the operating mode of the monitoring point.
- Monitoring point name.
- Current operating mode of the monitoring point:
  - If the monitoring point is disabled, the Disabled value is displayed.
  - If the monitoring point is enabled, the current mode of the technologies for which the operating mode can be selected is displayed. The tile contains the name of the mode: Learning or Monitoring, if all technologies operate in this mode. If different modes are selected for the technologies, the Mixed value is displayed.
- If the inheritance of the node technologies is disabled for a monitoring point, the icon is displayed.

How to view the network interface information in the details area

For a network interface to which a monitoring point is not added, the following information is displayed in the details area:

Network interface – name of the network interface in the operating system.
Connection – icon indicating that a network cable is connected to the Ethernet port of the network interface:
- – the network cable is connected.
- – the network cable is disconnected.
The icon blinks when Ethernet port blink mode is enabled.
MAC address – MAC address of the network interface.
IP address – IP address of the network interface. If multiple IP addresses are detected on a network interface, the details area displays no more than 16 IP addresses.

If a monitoring point has been added to the network interface, the following information is displayed:

Monitoring point name.
Status – current status of the monitoring point indicated by an icon and text description:
- OK. The monitoring point is available.
- Switchover. The operating mode of the monitoring point is being changed.
- Error. An error was detected when switching over the operating mode of the monitoring point.
Network interface – name of the network interface in the operating system.
Mode – current operating mode of the monitoring point:
- Enabled.
- Disabled.
The Manage technologies tab displays the list of technologies and methods that can be enabled or disabled on the monitoring point.
For the technologies with a selectable operating mode, the current mode is displayed: Learning or Monitoring. If learning mode is enabled, the date and time of the automatic switching to the monitoring mode are displayed to the right of the mode name (the date and time are not displayed if the time of the automatic switching is not set).
On the Settings tab:
- Inheritance of technologies—a flag indicating if the inheritance of the node technologies is enabled or disabled.
- MAC address – MAC address of the network interface.
- IP address – IP address of the network interface. If multiple IP addresses are detected on a network interface, the details area displays no more than 16 IP addresses.

Page top