Disable Discovery Protocols for selected Devices

dreamstime_xs_37045307_improve
dreamstime_xs_37045307_improve

Dear JDisc friends,

we are permanently improving our software. This time, we got requests from customers that our discovery is creating security alerts on specific devices when trying to connect via SSH or other protocols. Especially firewalls don’t like when applications try to connect via SSH. Wouldn’t it be cool to define that remote login via SSH will not be used on this particular device? If we already know that we use SNMP to perform the scan and SSH will not provide any additional information, but just creates security alerts, then we can simply disable remote login via SSH for this device. Of course, this will not affect the discovery of other devices!

The following sections explain how to disable individual discovery protocols and where to review a device’s configuration.

Disable individual devices by selecting them in any device report and then use the context menu in order to disable the protocols. Choose the menu item Reset Discovery Protocols in order to reset the individual discovery protocol settings to their default (enabled).

Disable disable discovery protocols
Select devices and use the context menu to disable individual discovery protocols

The context menu opens a configuration dialog that lets you choose the protocols to disable.

Disable2 choose protocols to disable
Choose the protocols to disable for the selected devices

Note that SNMP disables SNMPv1, v2c and v3 and remote login disabled remote login and remote login admin!

Once a protocol is disabled, it will not be used to scan the selected devices anymore. Review the settings for a particular device from within its properties dialog.

Disabled3 list of disabled protocols for a particular device
Check the list of disabled protocols for a particular device

In order to get an overview of all devices, you might create a custom report which includes the list of disabled protocols for each device.

Disabled4 list of disabled protocols in your custom report
Include the list of disabled protocols in your custom report

We hope that you like this new feature and that it helps to reduce the list of security alerts that are related to discovery activities.

This feature will be released with the next build 5018.

Cheers,
Thomas

About The Author

Thomas Trenz
I own and manage JDisc and its network inventory and discovery products. Before I started JDisc, I worked quite a long time for Hewlett-Packard developing software for network assessments and inventory projects. Feel free to contact me on Linked-In or Xing.

Leave A Comment


The reCAPTCHA verification period has expired. Please reload the page.