Skip to main content
cmaheu
Staff
Staff
October 10, 2018

Technical Tip: Host record creation methods

  • October 10, 2018
  • 0 replies
  • 1216 views

Description

 

This article describes about host record creation methods.

 

Solution

 

Rogue host records are created if any one of the following scenarios occur:
  • Connected switch is L2 Polled by the appliance
  • Connected switch sends a Link State Trap (which triggers the L2 Poll)
  • Connected switch sends a MAC Notification Trap
 
The following methods will create host records regardless if connected switch is modeled in Topology/Inventory:
  • DHCP fingerprint for the host is received on eth0 of appliance 
    • If connected switch is not in Topology/Inventory, adapter record will display offline with a blank Location field
    • To verify if DHCP fingerprint was received, search for MAC address.  Refer to the appropriate Administration Guide for details:
    • Version 8.xHosts - > Device Identity    
    • Version 9.x: Users & Hosts - > Endpoint Fingerprints
    • If fingerprint with an invalid MAC address is received, a rogue record will not be created. 
  • An Agent is installed on the host and communicates with the appliance.
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!