IoT Security
Features Introduced in Network Discovery 2.0
Table of Contents
Expand All
|
Collapse All
IoT Security Docs
-
-
- Firewall Deployment Options for IoT Security
- Use a Tap Interface for DHCP Visibility
- Use a Virtual Wire Interface for DHCP Visibility
- Use SNMP Network Discovery to Learn about Devices from Switches
- Use Network Discovery Polling to Discover Devices
- Use ERSPAN to Send Mirrored Traffic through GRE Tunnels
- Use DHCP Server Logs to Increase Device Visibility
- Control Allowed Traffic for Onboarding Devices
- Support Isolated Network Segments
-
Features Introduced in Network Discovery 2.0
Review the features introduced in the Network Discovery plugin 2.0.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Review the features introduced in the Network Discovery plugin 2.0.
What's New in Network Discovery 2.0.2
Review the new features introduced in Network Discovery plugin 2.0.2.
| New Feature | Description |
|---|---|
|
SNMP Crawling Settings Enhancements
PAN-OS 11.1 and later 11 releases
|
Network Discovery adds configuration options to
SNMP crawling
to help target specific parts of the network and control
resource consumption.
For SNMP network discovery or for SNMP network data
refreshment jobs, you can set the maximum duration for the
jobs to run.
When Network Discovery queries SNMP switches, you can specify
the name of the site where the job queries switches, and
configure the maximum number of hops to crawl from the entry
switch. Additionally, you can specify how long to wait for a
response before an attempt times out, as well as how many times
to retry querying a switch.
|
|
Polling Protocols Support
PAN-OS 11.1 and later 11 releases
|
Network Discovery adds support for
polling
with the following protocols:
|
What's New in Network Discovery 2.0.1
Review the new features introduced in Network Discovery plugin 2.0.1.
| New Feature | Description |
|---|---|
|
Enable Debug Logs
PAN-OS 11.1 and later 11 releases
|
Enable debug logs from Network Discovery polling using the following command in the admin terminal.
request plugins debug networkdiscovery level [high|low|medium|off]
|
What's New in Network Discovery 2.0.0
Review the new features introduced in Network Discovery plugin 2.0.0.
| New Feature | Description |
|---|---|
|
Learn Device Attributes by Polling
PAN-OS 11.1 and later 11 releases
|
You can now
learn device attributes by
polling
using various protocols through the Network Discovery plugin.
When the Network Discovery plugin successfully polls a device,
IoT Security adds whatever attributes it didn't yet have for the
device. When it learns attributes for assets that aren't yet in
its database, it creates new entries for the devices. If
IoT Security learns only an IP address, it adds a new entry to
the IP Endpoints page.
|