Node Management and Filter

Sensor and Group Lists

The Sensor and Group Lists allow you to view nodes quickly and systematically. In the top menu, click Management > Node.

  • Sensor Tab: Displays all nodes belonging to all networks, detected networks, and sensors.

(Clicking on a sensor will display all nodes associated with that sensor.)

  • Group Tab: Displays all nodes and nodes classified by status groups or policy groups.

Status & Filter Lists

In the Status & Filter Lists, you can filter nodes using predefined filters.

  1. In the top menu, click Management > Node.
  2. In the left Status & Filter Lists, click Item and then Sub-item.

(Clicking an item displays a summary view for nodes within that item.)

To view a predefined filter for "Microsoft Windows" on nodes managed by a specific Sensor:

  1. In the top menu, click Management > Node.
  2. Go to the Sensor tab in the left menu. Click a specific sensor.
  3. In the bottom left menu, go to Status and Filter. Click Node Group > Identification > Microsoft Windows.

Only "Microsoft Windows" nodes managed by the specific sensor will be displayed in the main Node View screen.

Customizing Status and Filter

Unnecessary categories that are not in use can be hidden.

  1. In the top menu, click Management > Node.
  2. In the left menu, find Status and Filter. Click the Update icon in the top right of the left Status and Filter item.
  3. Drag and drop unwanted categories from Selected to Available.
  4. Click Update.

Note

Custom status and filters currently only affect the current administrator's view.

Finding Nodes by Network Sensor

  1. Go to Management > Node in the top menu.
  2. Go to the Sensor tab in the left menu.
  3. To use search, click the search icon.
  4. Enter the Network Sensor's Name or IP.
  5. Select a specific sensor.
    • If no results are available, enter a blank space and press Enter to view all sensors.

Note

Nodes in the default node view based on Network Sensor location will be displayed.

Editing and Creating Subfolders for Multiple Sensors

  1. Go to Management > Node in the top menu.
  2. Go to the Sensor tab in the left menu.
  3. Click the Edit Tree icon in the top right.
  4. Select and drag and drop sensors to rearrange Network Sensors.
    • If you have many Network Sensors, you can create subfolders by selecting the Create option.

Finding Nodes by Node Group

  1. Go to Management > Node in the top menu.
  2. Go to the Group tab in the left menu.
  3. Below the site name are four Node Categories containing Node Groups.
    • Identification
    • Categorization
    • Compliance
    • Uncategorized

Note

These are provided by default, but you can create others by going to Managing Node Groups.

Editing and Creating Node Categories for Sensors and Node Groups

  1. Go to Management > Node in the top menu.
  2. Go to the Group tab in the left menu.
  3. Click the Edit Tree icon in the top right.
  4. Right-click the site name to assign Sensors or Node Groups.
    • If you have many Network Sensors, you can create subfolders by selecting the Create option.
    • Select Assign and switch to view options for Sensors or Node Groups.
  5. Click Search and click the checkbox.
  6. Click Confirm.

Displaying Node List in Various Views

You can browse Nodes through various perspectives.

  1. Go to Management > Node in the top menu.
  2. Click the Menu icon to the right of the Actions button.
  3. Select View By > By Node or By Device.
  4. View from the following perspectives:
    • Overview
    • Node View
    • IPAM View
    • Anomaly View
    • OS Updates View
    • Asset Management View
    • Agent Action View
    • Authenticated User View
    • External Device View
    • Device Life-Cycle View

Finding Details

  1. Go to Management > Node in the top menu.
  2. Find and click the desired IP Address of the Node.
  3. Find general information and other information to include:
  • If the agent is not installed
  • General - IP, MAC, IPv6, IPv6 Link-local, Hostname, Platform, Platform Intelligence, Connection Type, User Authenticated, RADIUS Acct-Session,Platform CVE, Manufacturer CVE, and more
  • Device - Name, Device ID, Device Life-Cycle, Nodes for Device
  • Network - Traffic, WLAN, TCP Connections, Service, Open Port
  • Logs - Logs, Status Logs
  • IPAM - IP and MAC Policy
  • Policy - Authentication Policy, Hostname Policy, Node Management Options
  • Policy Status - Node policy, Enforcement Policy, Node Group, Anomaly Definition, Agent Action Compliance Statistics
  • If the agent is installed, There are additional tabs. (The information shown may vary depending on the plugin assigned)
  • General
  • Device
  • System - Motherboard, Memory, Disk, OS, Network Connections, Interface, Sharing, User Account, USB Device, Monitor, Printer
  • Network
  • Software - Antivirus Software, installed Program
  • OS Update - Windows OS Update
  • Logs
  • IPAM
  • Policy
  • Policy Status

Searching Node Details

How to search for nodes with desired conditions from all nodes or selected sensors/groups:
  1. Access Management WebUI > Node menu
  2. Select All Nodes or Sensor/Group from the left tree view
  3. Click the search bar at the top right of the list window
  4. Select the attribute to search for and the MYSQL operator from the dropdown menu
  5. Enter the search term and click the search button
  • Supported Node Attributes:
    • IP
    • MAC
    • Status
    • Node Type
    • Node Policy
    • Enforcement Policy
    • Domain
    • Authenticated User Name
    • Authenticated User ID
    • Department
    • Hostname
    • Node Name
    • Node Description
    • Platform
    • Device Name
    • Device Description
    • Switch
    • Switch Port

    Many others supported