Devices: Difference between revisions

From Edge Threat Management Wiki - Arista
Jump to navigationJump to search
No edit summary
No edit summary
 
(4 intermediate revisions by 2 users not shown)
Line 1: Line 1:
<span style="display:none" class="helpSource devices">Device_List</span>
<span style="display:none" class="helpSource devices">Devices</span>
<span style="display:none" class="helpSource device_list">Device_List</span>
<span style="display:none" class="helpSource device_list">Devices</span>
<span style="display:none" class="helpSource device_list_current_devices">Device_List</span>
<span style="display:none" class="helpSource device_list_current_devices">Devices</span>


= Device List =
Devices provides a view of all current "devices" or unique MAC address on the local network(s).


The device list stores a list of known devices that exist on the network, identified by MAC address.
Each row represents a single a device (unique MAC address) that has been seen on any LAN interface.
It is similar to the [[Host Viewer]] except


* Devices are identified by MAC address
As NG Firewall scans and processes network traffic, the platform and many of the apps will save information about devices on the network.
* The device list is saved to the disk
This information is stored in the "Device Table" and the Devices view provides a view into the device table.


[[Image:Device_List.png|600px|center|thumb|An example device list]]
= Controls =


The device list can help you manage and identify all the known devices on your network. If a device that (on any non-WAN interface) is discovered, it will automatically be added to the device list. Because of this the device list permanently stores a list of all devices ever seen on the local network.
The device view by default shows all devices and some basic information about each session.


The device list stores an assortment of information about each device.
# '''Refresh''' refreshes the grid with the current active sessions.
# '''Reset View''' resets the view to the default view. Any changes to the default view are saved in your local browser session.


# '''Add''' can be used to manually add devices to the device table.
However, As devices are discovered they are automatically added to the device table.
# '''Export''' exports the current device table to a JSON file.
# '''Import''' imports a JSON file into the device table
More controls can be accessed by mousing over any column head and using the drowdown menu on the column header.
# '''Sort Ascending''' sorts the selected column in ascending order.
# '''Sort Descending''' sorts the selected column in descending order.
# '''Columns''' allows the removal or addition of columns to the current view.
# '''Filter''' provides a way to filter current data on this column with the provided value.
# '''Save''' saves any changes manually made by the administrator
Unlike [[Sessions]] and [[Hosts]], the device table is saved and permanent.
The administrator can edit, modify, and save the values of the attributes for each Device.
= Columns =
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
{| border="1" cellpadding="2"
{| border="1" cellpadding="2"
|+
|+
! Column !! Information
! Property !! Description
|-  
|-
| MAC Address
| MAC Address
| The MAC address of the device. This is the primary key.
| The MAC address of this Device
|-
|-
| MAC Vendor
| MAC Vendor
| If known, this is the manufacturer of the MAC Address according to the public [http://standards-oui.ieee.org/oui.txt OUI database].
| The Vendor of the MAC address of this Device if known
|-
| Interface
| The interface on which this Device was last seen
|-
| Last Hostname
| The last hostname of this device that was learned automatically (via DHCP, DNS, or [[Directory Connector]])
|-
|-
| Hostname
| Hostname
| The last known hostname of this device
| The manually configured hostname for this device - this will be blank unless set by the administrator
|-
|-
| Device Username
| Username
| The username associated with this device.
| The manually configured username for this device - this will be blank unless set by the administrator
|-
|-
| HTTP - User Agent
| HTTP User Agent
| The last known HTTP - User Agent of this device
| The HTTP User Agent of this device (according to a recent HTTP request)
|-
|-
| Last Seen Time
| Last Seen Time
| The last time this device was seen on the network
| The last time this device was seen on the network
|-
| Tags
| The tags of this device
|}
|}


The device table can be a useful tool to identify devices on the network.
</blockquote>
 
For devices that are not "shared" between users, the administrator can set the ''Device Username'' and this username will be used for traffic from this device if no other username is known.
 
There is an alert in [[Apps]] > [[Reports]] > [[Reports#Alert Rules]] called ''"New device discovered"'' that can be enabled to alert the adiminstrator whenever a new device is discovered.
 
'''Note:''' Because the device list is based on MAC address, and MAC addresses to NOT transit beyond the immediate ethernet segment, Untangle is unable to see the MAC addresses of clients behind another router. The device table, and MAC addresses in general, are only useful to "flat" networks that do not have internal routers that "hide" MAC addresses.

Latest revision as of 16:09, 3 May 2022

Devices provides a view of all current "devices" or unique MAC address on the local network(s).

Each row represents a single a device (unique MAC address) that has been seen on any LAN interface.

As NG Firewall scans and processes network traffic, the platform and many of the apps will save information about devices on the network. This information is stored in the "Device Table" and the Devices view provides a view into the device table.

Controls

The device view by default shows all devices and some basic information about each session.

  1. Refresh refreshes the grid with the current active sessions.
  2. Reset View resets the view to the default view. Any changes to the default view are saved in your local browser session.
  1. Add can be used to manually add devices to the device table.

However, As devices are discovered they are automatically added to the device table.

  1. Export exports the current device table to a JSON file.
  2. Import imports a JSON file into the device table

More controls can be accessed by mousing over any column head and using the drowdown menu on the column header.

  1. Sort Ascending sorts the selected column in ascending order.
  2. Sort Descending sorts the selected column in descending order.
  3. Columns allows the removal or addition of columns to the current view.
  4. Filter provides a way to filter current data on this column with the provided value.
  1. Save saves any changes manually made by the administrator

Unlike Sessions and Hosts, the device table is saved and permanent. The administrator can edit, modify, and save the values of the attributes for each Device.

Columns

Property Description
MAC Address The MAC address of this Device
MAC Vendor The Vendor of the MAC address of this Device if known
Interface The interface on which this Device was last seen
Last Hostname The last hostname of this device that was learned automatically (via DHCP, DNS, or Directory Connector)
Hostname The manually configured hostname for this device - this will be blank unless set by the administrator
Username The manually configured username for this device - this will be blank unless set by the administrator
HTTP User Agent The HTTP User Agent of this device (according to a recent HTTP request)
Last Seen Time The last time this device was seen on the network
Tags The tags of this device
Retrieved from "https://wiki.edge.arista.com/index.php?title=Devices&oldid=28225"