Manage Discovery configuration

note

“Ping” discovery will always be performed for any defined IP address range.

Network discovery

An Inventory server can be configured to perform network discovery on specific IP address ranges using the following technologies: SNMP, SSH, WinRPC/WMI, ICMP, DNS lookup, TCP/IP fingerprinting, and NIC manufacturer lookup.

note

When using TCP/IP fingerprinting, the ports of the Inventory server must be opened for all incoming TCP/IP traffic destined for the application snowserver.exe.

Add Network discovery

1. In the category view, click Inventory servers.

2. Select a server in the list, and then click Show details.

3. Click Edit.

   The Server Discovery options wizard appears.

4. Click Device discovery.

   The Device discovery options page appears.

5. In the Network discovery options section, click Add.

   The Add network discovery dialog box appears.

6. Select Interface in the list.

   The IP range boxes From and To are automatically populated with a suggested address range of the selected interface.

   note

   • The range is only a suggestion and can be edited if need be.

   • IP addresses outside of the selected interface's subnet can also be included.

7. Enable the discovery methods to be used for the selected Interface and IP range by selecting Enabled in the respective lists.

   The Ports are set automatically to the standard ports, but can be changed.

8. Click Add to add the network discovery and close the Add network discovery dialog box.

   The selected discovery methods are added to the list.

9. Click Save to save the changes and close the Server Discovery options wizard.

Edit Network discovery

1. In the category view, click Inventory servers.

2. Select a server in the list, and then click Show details.

3. Click Edit.

   The Server Discovery options wizard appears.

4. Click Device discovery.

   The Device discovery options page appears.

5. In the Network discovery options section, select an Interface in the list, and then click Edit.

6. Make the changes.

7. Click Update to update the network discovery and close the Add network discovery dialog box.

8. Click Save to save the changes and close the Server Discovery options wizard.

Active Directory Discovery

An Inventory server can be configured to perform Active Directory discovery using LDAP or secure LDAP. Information on both devices and users can be gathered, and multiple LDAP paths can be configured.

note

• Depending on the size of the network to be discovered, it will take some time for the devices to appear in the Discovery view of the Admin Console.

• Information on users will be gathered and stored in the Inventory Server database, but it will not be visible in the user interface of the Admin Console.

Enable Active Directory discovery of computers

1. In the category view, click Inventory servers.

2. Select a server in the list, and then click Show details.

3. Click Edit.

   The Server Discovery options wizard appears.

4. Click Device discovery.

   The Device discovery options page appears.

5. In the Active Directory discovery options section, select the Enable Active Directory device discovery check box.

6. In the Active Directory discovery options section, click Add.

   The Add LDAP Path dialog box appears.

7. Type an LDAP path to the Active Directory domain.

   If a specific port is required, specify it in the LDAP path.

   EXAMPLE

   • The Inventory Server is a member of the domain to be scanned:

     LDAP://DC=MyDomain,DC=com

   • The Inventory Server is not a member of the domain to scanned:

     LDAP://DC001.MyDomain.com

8. To use secure LDAP, select the Use SSL check box.

9. Type a User Name of a user with read privileges in the Active Directory domain.

   Use the following format: domain\username

10. Type and confirm the Password of the user.

11. Click Add.

    The LDAP path is added to the list.

12. Click Save to save the changes and close the Server Discovery options wizard.

Edit Active Directory discovery of computers

1. In the category view, click Inventory servers.

2. Select a server in the list, and then click Show details.

3. Click Edit.

   The Server Discovery options wizard appears.

4. Click Device discovery.

   The Device discovery options page appears.

5. Make the changes in the Active Directory discovery options section.

6. Click Save to save the changes and close the Server Discovery options wizard.

Enable Active Directory discovery of users

1. In the category view, click Inventory servers.

2. Select a server in the list, and then click Show details.

3. Click Edit.

   The Server Discovery options wizard appears.

4. Click User discovery.

   The User discovery options page appears.

5. Select the Enable Active Directory user discovery check box.

6. Click Add.

   The Add LDAP Path dialog box appears.

7. Type an LDAP path to the Active Directory domain.

   If a specific port is required, specify it in the LDAP path.

   EXAMPLE

   • The Inventory Server is a member of the domain to be scanned:

     LDAP://CN=Users,DC=MyDomain,DC=com

   • The Inventory Server is not a member of the domain to scanned:

     LDAP://DC001.MyDomain.com

     LDAP://DC001.MyDomain.com/CN=Users,DC=MyDomain,DC=com

8. To use secure LDAP, select the Use SSL check box.

9. Type a User Name of a user with read privileges in the Active Directory domain.

   Use the following format: domain\username

10. Type and confirm the Password of the user.

11. Click Add.

    The LDAP path is added to the list.

12. Click Save to save the changes and close the Server Discovery options wizard.

Edit Active Directory discovery of users

1. In the category view, click Inventory servers.

2. Select a server in the list, and then click Show details.

3. Click Edit.

   The Server Discovery options wizard appears.

4. Click User discovery.

   The User discovery options page appears.

5. Make the changes.

6. Click Save to save the changes and close the Server Discovery options wizard.