Notification

Icon
Error

Scan entire remote network - How to Scan entire remote network

Posted: Thursday, September 5, 2019 1:32:59 AM(UTC)
MarcusB

MarcusB

Member Original PosterPosts: 3
0
Like
Hello all,

my apologies for the newbie question - currently evaluating Lansweeper.

See subject - what is the correct approach to can an entire remote/untrusted network. Does the LSAgent have this functionality?

Thx in advance!
M.
Esben.D
#1Esben.D Member Administration Posts: 1,977  
posted: 9/5/2019 8:38:56 AM(UTC)
LsAgent is a possibility, but then you would be installing an agent on every device in that network, plus, you won't be able to scan network devices.

The best method is to install a second scanning server in that remote network. That scanning server than connects to your Lansweeper database server. This video gives a good explanation of this concept: https://youtu.be/PYHU0iHMZRo



Here is the documentation on how to do it: https://www.lansweeper.c...ltiple-scanning-servers/
MarcusB
#2MarcusB Member Original PosterPosts: 3  
posted: 9/6/2019 5:32:04 PM(UTC)
I've already tested that and it works quite well.

However, my question is about untrusted networks that do not have connectivity to the database. I.e. communication over the Internet for satellite offices, or scanning DMZ networks behind firewalls.

Thx again for help and/or pointers.
M.
CyberCitizen
#3CyberCitizen Member Posts: 305  
posted: 9/9/2019 2:01:43 AM(UTC)
You could use LSPush in a logon script that you import every so often. But if it doesn't have connectivity back to the database, I don't see how you expect it to work apart from basic reporting.
MarcusB
#4MarcusB Member Original PosterPosts: 3  
posted: 9/11/2019 1:58:24 AM(UTC)
Some products have a special gateway/forwarder/proxy role, that handles communication from/to untrusted networks - and over untrusted networks - without having to deploy direct connectivity or vpn tunnels. Examples of this are the Splunk Forwarder or the SCOM Gateway.

I was wondering if there was similar functionality with Lansweeper.
The product is really full featured (almost a little too much), but that is a little bit of a bummer for organizations that have larger and distributed networks.

Thx again for your comments!
M.
RKCar
#5RKCar Member Posts: 68  
posted: 9/11/2019 4:28:59 PM(UTC)
I'm a bit confused after reading this. Is the issue that you want to be able to gather information on devices that are both:

*Not Windows
*Not on your trusted network

If so it can't be done with the current built in feature-set, and at least from my perspective would probably require a major overhaul of the product.

Lansweeper is a query based tool, always initiated from either an agent, or a server/device which kicks off specific actions. Something needs to exist within a particular segment to tell it what to look for, and where it can put it when it is done. The big difference with something such as Splunk is that logs are constantly being generated, and you know you want them, so it is perfectly fine sending them along to whatever collector you have in place without anything else getting in between. Lansweeper needs direction. The gap that needs to be filled by Lansweeper to make something like this possible is a scan/aggregation service that can be deployed in a lightweight fashion without a database requirement that can package and deploy information to their Cloud Gateway, eventually sending it to your local instance to be imported. I can think of so many ways for this not to work though unless you do have some sort of remote manageability available to you... Credentials? Configuration?

Sorry, I went off on a bit of a tangent. It just got more interesting as I was thinking about it.

Active Discussions

Lansweeper Changes in the licensing model
by  mcbeathb   Go to last post Go to first unread
Last post: Today at 6:47:51 AM(UTC)
Lansweeper About Memory Changes
by  fjca  
Go to last post Go to first unread
Last post: Yesterday at 5:51:17 PM(UTC)
Lansweeper Wildcard in file scanning to get all files in a directory?
by  RKCar   Go to last post Go to first unread
Last post: Yesterday at 4:03:43 PM(UTC)
Lansweeper Wishlist is dead, no responses from LS staff.
by  RobertB  
Go to last post Go to first unread
Last post: Yesterday at 3:08:12 PM(UTC)
Lansweeper Deploy installer packages not working any more
by  richv   Go to last post Go to first unread
Last post: Yesterday at 3:06:19 PM(UTC)
Lansweeper File Scanning
by  RKCar  
Go to last post Go to first unread
Last post: Yesterday at 2:22:54 PM(UTC)
Lansweeper HP Warranty scan - broken for some products
by  zaty   Go to last post Go to first unread
Last post: Yesterday at 1:52:38 PM(UTC)
Lansweeper How to stop deployments ?
by  Leandro Martins  
Go to last post Go to first unread
Last post: Yesterday at 1:47:22 PM(UTC)