Users Guide

154 | Monitoring Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
An SNMP description is necessary for discovering and profiling the network devices. For more information,
see SNMP Credentials Configuration on page 154.
l SSH credentials
For Linux server or network device discovery, specify SSH configuration credentials. For more information,
see SSH Credentials Configuration on page 156.
l WMI credentials
For Windows device discovery, specify WMI (Windows Management Instrumentation) credentials. For more
information, see WMI Credentials Configuration on page 158.
l Connected endpoints
Information about endpoints connected to the network device (typically MAC addresses of endpoints
connected to switch ports). These are added as discovered endpoints. For more information, see Viewing
Discovered Endpoints on page 165.
l ARP table
[[[Undefined variable aruba_style_guide.Profiler]]] supports Address Resolution Protocol (ARP) probes for
network discovery scans. When this option is enabled, the scan will now also probe all available ARP entries.
The ARP table provides information about MAC address > IP associations for endpoints that were recently
seen by this device. These endpoints are probed further in an attempt to profile those devices. For more
information, see Viewing Discovered Endpoints on page 165.
l Neighbor network devices
Other network devices connected to the seed device as determined by neighbor discovery protocols such as
Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP) (if enabled in your network).
Each of the discovered neighbor network devices are further queried as seed devices; this is repeated for
multiple levels in your network up to a specified scan depth. For more information, see Viewing Details on a
Discovered Device on page 164.
l Services and processes running on an Endpoint
During the subnet scan, Network Discovery and the OnConnect domain-joined Windows client will be
queried to retrieve all the services and processes running on the endpoint. This information will be
displayed in the W-ClearPass Insight Endpoint reports.
Network Discovery High-Level Tasks
Configuring Network Discovery consists of these major tasks:
1. Add the configurations (SNMP, SSH, or WMI) needed to query all the devices in the target network.
2. Initiate a network discovery scan.
3. Import the discovered network devices into W-ClearPass.
4. Review the set of discovered devices and view the connected endpoints and neighbors.
Adding the Configurations to Query Seed Devices
You must configure SNMP, SSH, and WMI credentials for the devices that you want to discover as part of the
network scan. These credentials are used during Network Discovery or an On-Demand subnet scan to profile
Linux servers and machines (SSH credentials), Windows servers and machines (WMI credentials), and network
devices (SNMP).
SNMP Credentials Configuration