Fortinet black logo

Administration Guide

Device Enrichment

Device Enrichment

You can improve the Device Identifier by creating a Device Information Enrichment Profile that will retrieve Hostname information from the Windows Active Directory (AD) and DNS server of the target network. When the profile is enabled, the device enrichment process will run according to the scheduled cycle in the profile. You can also execute the profile manually.

After a cycle is completed, the Device Enrichment process will schedule a new cycle according to the profile. If the current cycle is not completed before the next scheduled cycle is to start, the enrichment process will skip the next cycle. For example, if you scheduled a cycle to run every hour, and the current cycle takes 120 minutes to run, the process will schedule the next cycle one hour after the current 120 minute cycle is finished running.

During the enrichment process, DNS Queries are fetched in batches via UDP. If there are failed queries in the batch, the system will retry three times before moving on to the next batch.

The Device Enrichment page displays the following information:

Enable/Disable Indicates if the profile is enabled or disabled.
Profile Name The name assigned to the profile.
Server name/IP The IP address of the windows AD server or domain name.
Port

The port used by the profile.

If SSL is enabled the port is 636 otherwise the default is 389.

Profile Status

After the first run is performed, the status changes to Completed with the previous running result.

Matched Count is the number of IPs returned from the DNS server that matched the IPs in the Device inventory.

Last Updated The date and time the device enrichment was updated.

Viewing the retrieved device identifier

If a new hostname is found, the device identifiers on the Device Inventory page and Device Log Page are replaced with the latest hostname found from AD and an icon (AD) appears next to the new identifier. The Device Enrichment time can be found at the Latest Device Enrichment Column. This column is disabled by default.

Overwriting the device identifier

You can manually overwrite the device identifier in the device information page.

To overwrite the device identifier:
  1. In the Network Insights module, select a device and click View Device Detail or View Device. The Information page opens.

  2. Edit the device name and click Update Device Identifier.

Device Enrichment

Device Enrichment

You can improve the Device Identifier by creating a Device Information Enrichment Profile that will retrieve Hostname information from the Windows Active Directory (AD) and DNS server of the target network. When the profile is enabled, the device enrichment process will run according to the scheduled cycle in the profile. You can also execute the profile manually.

After a cycle is completed, the Device Enrichment process will schedule a new cycle according to the profile. If the current cycle is not completed before the next scheduled cycle is to start, the enrichment process will skip the next cycle. For example, if you scheduled a cycle to run every hour, and the current cycle takes 120 minutes to run, the process will schedule the next cycle one hour after the current 120 minute cycle is finished running.

During the enrichment process, DNS Queries are fetched in batches via UDP. If there are failed queries in the batch, the system will retry three times before moving on to the next batch.

The Device Enrichment page displays the following information:

Enable/Disable Indicates if the profile is enabled or disabled.
Profile Name The name assigned to the profile.
Server name/IP The IP address of the windows AD server or domain name.
Port

The port used by the profile.

If SSL is enabled the port is 636 otherwise the default is 389.

Profile Status

After the first run is performed, the status changes to Completed with the previous running result.

Matched Count is the number of IPs returned from the DNS server that matched the IPs in the Device inventory.

Last Updated The date and time the device enrichment was updated.

Viewing the retrieved device identifier

If a new hostname is found, the device identifiers on the Device Inventory page and Device Log Page are replaced with the latest hostname found from AD and an icon (AD) appears next to the new identifier. The Device Enrichment time can be found at the Latest Device Enrichment Column. This column is disabled by default.

Overwriting the device identifier

You can manually overwrite the device identifier in the device information page.

To overwrite the device identifier:
  1. In the Network Insights module, select a device and click View Device Detail or View Device. The Information page opens.

  2. Edit the device name and click Update Device Identifier.