The LAN Watch by Network and LAN Watch by Probe pages discover computers and devices on LANs. Any agent machine on a LAN can be selected as the "probe" machine for that LAN. Scanning a LAN using a probe machine discovers any device or machine with an IP address. Discovered devices can be workstations and servers without agents, SNMP devices and vPro-enabled machines. Discovered devices display on the following pages:
A LAN is detected if a single computer on that LAN is installed with an agent. Detected LANs are identified consecutively as LAN1, LAN2, LAN3, etc. The name assigned to a LAN can be changed for easier recognition. Each LAN is distinguished by a unique combination of the following two items:
The internal IP range shown in the Scan Range column, and
The external IP address shown in the Gateway column.
The internal IP range shown in the Scan Range column is expressed as the starting IP address followed by the number of bits—for example, /24—representing the network portion of the IP address.
Duplicate LAN Ranges
Occasionally two LANs are listed on the LAN Watch by Network page with the same IP address range or overlapping IP address ranges. This condition is commonly caused by a device, router, or DHCP with a mis-configured subnet mask. When this happens:
Discovery generates a system alert that displays on the Monitor > Alarm Summary page.
Running Discovery scans on overlapping LANs will appear to 'move' machines back and forth between each LAN as they are re-discovered.
To avoid this behavior, network administrators can either:
Reconfigure devices on their networks to correct the condition, or
Set Discovery to "ignore" one of the networks.
Using LAN Watch by Network
Select the row of a detected LAN in the upper panel.
Select New or Edit to set the scan properties. This includes the machine to serve as a probe machine. Windows, Mac and Linux agent machines can all serve as probe machines.
Optionally deploy agents to discovered computers by policy, using the Agent Deployment Policy tab in the lower panel.
Optionally create alerts for newly discovered types of computers and devices, using the Alert Profiles tab in the lower panel.
Optionally set asset policies for discovered computers and devices, using the Asset Promotion page.
Schedule a scan once or on a recurring basis using the Schedule Scan button, or run a scan immediately using the Scan Now button.
Optionally search for SNMP devices and vPro enabled machines using the Schedule Scan dialog.
A scan can be assigned to multiple LANs at the same time. Each LAN will execute the policies assigned for that LAN using the tabs in the lower panel.
Actions
New - Manually adds a new network. Displays the same properties as the Edit Network.
Edit - Displays the Edit Network. Sets the scan options used by Scan Now. These same settings serve as the default settings displayed by the Scan Schedule dialog.
Delete - Deletes a network. Use this option to remove a network that no longer has any managed agents.
Schedule Scan - Displays the Scan Schedules Dialog. Schedules a LAN Watch scan, on a recurring basis, for a selected network.
Scan Now - Runs LAN Watch immediately on a selected network using the scan options defined by the Edit Dialog.
Ignore - Prevents a network from being scanned.
Stop Ignoring - Re-enables the scanning of a network that was previously ignored.
Network Name - The friendly name assigned by the VSA to identify a network.
Gateway - The connection gateway IP address.
Scan Range - The internal IP range expressed as the starting IP address followed by the number of bits—for example, /24—representing the network portion of the IP address.
Subnet Mask - Determines the number of IP addresses in a subnet.
Org ID - The unique identifier of an organization in the VSA.
Org Name - The VSA friendly name of the organization.
Status - The status of a scan. A scan progresses through the following statuses. These statuses are displayed in Pending Procedures and Procedure History. If the scan does not fail, the status returns to ReadyToScan once a scan is completed.
0 - ReadyToScan - Scan not yet started.
1 - Installing
2 - PerformingQuickScan
3 - CompletedQuickScan
4 - PerformingDeepScan
5 - DNSScan
6 - Failed
Scan Progress - Displays a progress bar for a deep scan.
Next Scan - The date/time a scan is next scheduled.
Last Scan - The date/time a scan last ran.
Scanned Devices - A count of the devices discovered on this network.
Assets - A count of the number of devices marked as managed View Assets.
Agents - The number of machines and devices installed with agents on the LAN.
Alerts Active - If checked, alerts are active on this network.
Network Prefix - The number of bits used to specify the network portion of an IP address.
Max Addr Count - The maximum number of IP addresses specified by a network.
- Click this icon to display the results of the latest scan and the accumulated results of all previous scans.
- The network ready to be scanned.
- The network is ignored for scanning.