Requirements
The machine
The probe runs as a Windows service on a machine of your network. It can be a server or an always-on PC, physical or virtual, as long as it can reach the networks to scan.
| Requirement | Details |
|---|---|
| Operating system | Windows Server 2016 or later, Windows 10 or Windows 11. |
| Privileges | A local administrator account, to install the probe. The service then runs as Local System. |
| Software | None. The probe is a single executable, signed by Inside Technologies Srl. |
The machine should stay on: the probe scans only while it runs.
Firewall
The probe only opens outbound connections: it does not need any inbound port.
| From | To | Port | Purpose |
|---|---|---|---|
| The probe | cyberguard-api-network-itn.cyberguard.srl |
TCP 443 (HTTPS) | Registration, configuration and sending the results. |
| The probe | The networks to scan | ICMP echo (ping) | Finding the devices that are on. |
| The probe | The networks to scan | UDP 161 (SNMP) | Reading the device data. |
A device that does not answer the ping is not queried through SNMP. If a firewall between the probe and a network blocks ICMP, allow it from the probe's IP address.
The network devices
To appear in the list, a device must have SNMP enabled and accept queries from the IP address of the probe. Many devices restrict SNMP to a list of allowed managers: add the probe's IP address to it.
The probe only reads: use read-only SNMP credentials.
| Version | What you need |
|---|---|
| v2c | The community string. |
| v3 | The user and, depending on how the device is configured, the authentication protocol and password and the privacy protocol and password. |
For SNMP v3 the probe supports MD5 and SHA for authentication, DES and AES for privacy, and all three security levels: no authentication, authentication only, authentication and privacy.
Prefer v3 when your devices support it. With v2c the community travels in clear text, and a device that receives a wrong community simply does not answer, so a typo is hard to tell from a device without SNMP.
In the portal
To configure probes you need the network devices module in your permission group (see Users & Permissions).