Fortinet black logo

Administration Guide

Asset Discovery

Copy Link
Copy Doc ID 666526c9-6f4b-11ed-8e6d-fa163e15d75b:93091
Download PDF

Asset Discovery

The Asset Discovery module generates Asset Inventory by passively fingerprinting the OS and other parameters for the assets in OT/IT/IoT networks. This improves threat visibility for the networks and helps with optimizing decoy placement.

The Asset Discovery page displays the following information:

Action

Click Delete to remove the asset.

IP Address

The IP address of the asset.

MAC

The MAC address of the asset.

Vendor

The vendor identified by the asset MAC address.

Network

The network this asset was discovered.

Hostname

The hostname of the asset.

Device OS

The Device OS of the asset.

Device Firmware

The firmware version of the asset.

Device Type

The type of the asset.

To enable Asset Discovery:
  1. Go to Deception > Asset Discovery.
  2. Click Asset discovery setting.
  3. Enable the following the settings:

    Passive IT Network Discovery

    Enable to allow FortiDeceptor to identify common IT devices such as servers, laptops, and routers by sniffing network traffic.

    Select all the ports connected to the network for discovery.

    Passive ICS Network Discovery

    Enable to allow FortiDeceptor to identify industrial control devices such as PLC controllers.

    Select all the ports connected to the network and ICS protocols for discovery. The available protocols are, MODBUS, DNP3, ENIP, S7comm/S7comm plus, BACNET, Profinet, FINS, ATG, Kamstrup, Moxa, IEC104, FL-net, GE-EGD, GE-SRTP, Triconex and PCOM.

  4. Click OK.
To delete multiple assets at the same time:
  1. Select the assets you want to delete.
  2. In the toolbar, click Delete.
To export the asset details as a CSV file:

In the toolbar, click Export CSV.

Asset Discovery

The Asset Discovery module generates Asset Inventory by passively fingerprinting the OS and other parameters for the assets in OT/IT/IoT networks. This improves threat visibility for the networks and helps with optimizing decoy placement.

The Asset Discovery page displays the following information:

Action

Click Delete to remove the asset.

IP Address

The IP address of the asset.

MAC

The MAC address of the asset.

Vendor

The vendor identified by the asset MAC address.

Network

The network this asset was discovered.

Hostname

The hostname of the asset.

Device OS

The Device OS of the asset.

Device Firmware

The firmware version of the asset.

Device Type

The type of the asset.

To enable Asset Discovery:
  1. Go to Deception > Asset Discovery.
  2. Click Asset discovery setting.
  3. Enable the following the settings:

    Passive IT Network Discovery

    Enable to allow FortiDeceptor to identify common IT devices such as servers, laptops, and routers by sniffing network traffic.

    Select all the ports connected to the network for discovery.

    Passive ICS Network Discovery

    Enable to allow FortiDeceptor to identify industrial control devices such as PLC controllers.

    Select all the ports connected to the network and ICS protocols for discovery. The available protocols are, MODBUS, DNP3, ENIP, S7comm/S7comm plus, BACNET, Profinet, FINS, ATG, Kamstrup, Moxa, IEC104, FL-net, GE-EGD, GE-SRTP, Triconex and PCOM.

  4. Click OK.
To delete multiple assets at the same time:
  1. Select the assets you want to delete.
  2. In the toolbar, click Delete.
To export the asset details as a CSV file:

In the toolbar, click Export CSV.