Wired Network Monitoring

Wired Network Monitoring is used to monitor the wired network devices in your system. You can generate an alarm policy for your wired network by selecting any of the following conditions:

• New device detected on the wired network. Using the Known Vendors button, you can select the wired equipment vendors used in your network. Any vendor selected in the list will generate a lower severity alarm condition.
• Sanctioned wired device detected at different location in tree hierarchy than when originally discovered.
• Sanction device no longer observed. You must specify a minimum time for the device to have not been seen on your network.

To detect new devices on your network, existing devices must be classified as sanctioned. The Mass Wired Network Device Classification button opens a dialog where you can sanction all or a selection of devices at one time. Typically, this process should be done when you initially configure policies or after major network changes.

To turn on Wired Network Monitoring, you should always enable it at the appliance level by selecting the Enable configuration checkbox. When you do, all the other network levels are also monitored.

Then, if you have a level that needs to be monitored using different settings, you can monitor that level by selecting the network level from the network tree, overriding the inherited Wired Network Monitoring (select Override settings radio button), and then defining different settings for Wired Network Monitoring.