Insight Inventory

About the Insight Inventory

Insight lists all authenticated endpoints on the network on the Inventory page.

View inventory information for all endpoints by navigating to Insight > Inventory, or click a graph widget on the Endpoints, Posture or Authentication Insight dashboards and drill down to display inventory data related to that graph.

Figure 1  The Insight Inventory Table

The endpoints information in the Inventory table is described in Table 1.

Table 1: Endpoints Table Parameters

Column

Description

MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. Address

MAC address of the endpoint.

IP address

IP address of the endpoint.

Hostname

Host name of the endpoint.

Category

Category assigned to the profiled endpoint device; for example, Access Points, Computer, Server Smart Device, or VoIP phone.

Family

The operating system (OS) family used by the endpoint device. For example, when the category is Computer, Insight can show a device OS family of Windows, Linux, or Apple Mac.

Device Name

The Device Name column describes a more specific device type within a device family. For example, a computer in the Windows device family may show a device type of Windows 8/10.

Sorting and Filtering Inventory Table Data

By default, each page of the Inventory table displays endpoints sorted by MAC address.

Click any column heading to resort the table by that column data type.

Click the filter ()icon on the Inventory table header to select one or more filter options and modify the table display only selected endpoint types.

The available filter types are described in Table 2 below.

Table 2: Inventory Table Filter Parameters

Column

Action/Description

Device Category

The Device Category drop-down list displays a list of the categories of devices found on your network, such as a server or printer. By default, the All option is selected, and the inventory displays devices in all categories.

Click this drop-down list and select any other device category to filter the table and display only devices of the selected type.

The contents of this drop-down list may vary, depending upon the types of devices in your network.

Device Family

The Device Family drop-down list displays a list of the device families found on your network, such as a Hewlett Packard, Aruba, or Intel. By default, the All option is selected, and the inventory displays devices in all categories.

Click this drop-down list and select any other device category to filter the table and display only devices of the selected type.

The contents of this drop-down list may vary, depending upon the types of devices in your network, and the selected device category.

Device Name

The Device Name drop-down list displays a list of the device names found on your network, such as an Apple iPhone. By default, the All option is selected, and the inventory displays devices in all categories.

Click this drop-down list and select any other device category to filter the table and display only devices of the selected type.

The contents of this drop-down list may vary, depending upon the types of devices in your network, and the selected device category.

Static IP

Click the Static IP drop-down list and select one of the following options:

All: Display endpoints with static and non-static IP addresses.

True: Display endpoints with a static IP address.

False: Display endpoints with a non-static IP address.

Conflict Status

Click the Conflict Status drop-down list and select one of the following options:

All: Display all endpoints.

True: Display endpoints with a conflict (device is profiled into two or more different categories.)

False: Display endpoints with no conflict.

Fingerprint Type

Insight can obtain fingerprint information for network devices through a variety of sources (for example, obtained directly from the host, or via DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network.  or SNMP Simple Network Management Protocol. SNMP is a TCP/IP standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention. ) The fingerprint drop-down list displays a list of fingerprint information sources for the devices found on your network. By default, the All option is selected, and the inventory displays devices identified by all fingerprinting types. Click this drop-down list and select any other fingerprinting type to filter the table and display only devices identified by the selected fingerprinting method.

NOTE: The contents of this drop-down list may vary, depending upon the fingerprinting methods used to identify devices on your network.

Posture

Click the Posture option select one of the following options to filter endpoints that have a posture status as a result of having undergone a health check.

All: Display all endpoints.

True: Display endpoints that have posture information.

False: Display endpoints that do not have posture information

System Posture Status

Click this option to filter the Inventory table by one or more of the posture status types for the endpoints on your network that have undergone a health check and have posture status information. This field will only return information for endpoints that have a posture status of True. The available parameters in this filter may vary, depending upon the posture status of the devices on your network.

Added at

Enter a start date and an end date to display devices added within a specified time range. You can also click the calendar () icon in the Start Date and End Date fields to select a start and end date from a calendar.

Last Updated

Enter a start date and an end date to display devices updated within a specified time range. You can also click the calendar () icon in the Start Date and End Date fields to select a start and end date from a calendar.

Authentication At

Enter a start date and an end date to display devices authenticated within a specified time range. You can also click the calendar () icon in the Start Date and End Date fields to select a start and end date from a calendar.

Viewing Endpoints Details

The Endpoint Details page appears when you select any MAC address in the Inventory table, or when you enter and search for a search string in the Insight search bar. This data can include information in the following categories:

Summary: Total number of successful authentications for that device over the selected time period.

Overview: This section displays endpoint information such as the device IP address, MAC address and host name, and network details such as the AP , controller or switch port to which the endpoint is connected.

Device Profile: Conflict information, and device profile data, such as the device category, family and name, and the time the device was first added or last updated.

OnGuard: This section displays OnGuard health check data, if available.

Endpoint Details: This section displays authentication details, endpoint role and policy information, the IP address of the NAD Network Access Device. NAD is a device that automatically connects the user to the preferred network, for example, an AP or an Ethernet switch. (Network Access Device), and the current authentication status.

Fingerprint Details: This section displays fingerprint details and information about fingerprint information sources for that endpoint.

Authentication Trend: A  line chart showing the number of successful authentications during each day of the selected time period

Bandwidth Usage: A bar chart showing bandwidth used by the endpoint during each day of the selected time period.

 

If the endpoint is seen on the trunk port instead of an access port, the information shown in the Switch Port field of the Network Details section displays the word (Trunk) after the network switch port number.