...
As at Open-AudIT 2.3.2 and later, we have introduced some easy to use and extremely powerful options for discovering devices. These options centre around directing Nmap on how to discover devices.
We have grouped these options into what we're calling Discovery Scan Options. We ship seven different groups of options (items) by default that cover the common use-cases.
This benefits Community, Professional and Enterprise customers.
Feature Availability
Feature availability is dependent on license type as per the table below.
| Feature |
|---|
...
| Feature | Community | Professional | Enterprise | |
|---|---|---|---|---|
| Match Rules - set default for all discoveries | y | y | y | |
| Discovery Scan Options - set default for all discoveries | y | y | y | |
| Discovery Scan Options - read | y | y | ||
| Discovery Scan Options - set per discovery | y | y | ||
| Discovery Scan Options - create, read, update, delete | y | |||
| Discovery Scan Options - Custom per Discovery | y | |||
| Discovery Scan Options - Exclude IP, range, subnet per discovery | y | |||
| Discovery Scan Options - Exclude ports per discovery | y | |||
| Discovery Scan Options - Set device timeout, per discovery | y | |||
| Discovery Scan Options - Custom SSH port per discovery | y | |||
| Match Rules - set per discovery | y |
...
Networks respond differently depending on how they're configured. Some routers and/or firewalls can respond "on behalf" of IPs on the other side of their interfaces to the Open-AudIT Server. It is quite common to see Nmap report a probe for SNMP (UDP port 161) to respond as open|filtered for devices that do and do not exist. This is misleading as there is no device at that IP, yet it ends up with a device entry in the database. 99.9% of the time, it is not Open-AudIT, nor even Nmap, but the network causing this issue. Now that we have the options to treat open|filtered ports as either open or closed, we can eliminate a lot of this confusion. Enterprise users even have the option to change this on a per discovery basis (more than just using the Medium (Classic) item, as above).
Discovery Enterprise Options
...
The screenshot below is the Open-AudIT Discovery Scan Options page where all the audit configuration is set. I've added ample notes in the page explaining all the options making the tool easy to use for less technical staff.
Click to enlarge.
Display Improvements
...
This new functionality makes Open-AudIT a powerful and easy to use discovery solution while providing great flexibility for advanced users.
I hope you find it as useful as enjoy the new features as much as our test customers and I do.
Mark Unwin.