| |
 |
 Network-wide, real-time detection and monitoring of all Ethernet and IP addresses
Distributed IPScan probes automatically detect all Ethernet and IP devices on the network, which are catalogued into a centralized server database for policy definition and enforcement. IPScan goes beyond traditional DHCP address services by providing full visibility and management of both DHCP and static IP addressed devices.
Centralized Ethernet and IP network access and address usage policy definition
Once devices are detected and stored in the central database, network managers can define global address and access policies, including specifying specific combinations of Ethernet MAC address, IP address and even hostname in order for a device to be authorized to connect to the network. All unassigned addresses, whether managed statically or via DHCP, can be marked as unauthorized by default. Once policies are defined, they are downloaded to distributed probes.
Automatic enforcement and blocking of unauthorized devices and addresses
IPScan probes can enforce policies by automatically blocking unauthorized devices that have unrecognized, changed, or unauthorized addresses and/or hostnames. In addition, administrators can in real-time block access to a particular device from the administrative console.
Time Based Policy Controls
Ethernet and IP access policies can be specified on a time of day, day of week or date basis. Access can also be defined for a specific time and duration.
Event detection and audit-trail logging
All Ethernet and IP address-related events such as attempted IP address changes, IP address conflicts, and new Ethernet MAC or IP addresses, are detected and logged in real-tim to the central database to establish a complete audit-trail.
Extensive Departmental and Group Definition Capabilities
Administrators can flexibly create groups and categorize IP users into physical and logical groups for comprehensive management.
Inactive or expired Ethernet or IP address control
Ethernet or IP addresses that have been inactive for a predefined period of time can be automatically blocked until users re-establish authorization credentials on the network.
|
|
|
|
