With the 2020 Spring Release, we introduced a powerful passive network scanning feature called Asset Radar. It continuously monitors your network traffic and offers a rapid, credential-free detection superpower to add to your Lansweeper toolbelt.
Asset Radar identifies assets as they connect to your network, which enables a whole set of exciting new use cases, which we will explain below. But first, let us take a look at the "Passive Network Scanning" concept.
Active vs Passive Network Scanning
The main idea behind Passive Scanning is to pick up the vast amount of data that networked IT assets expose and that can be captured without credentials. To establish a connection to a router, for instance, assets start broadcasting and receiving network packets, and these messages contain a lot of valuable information if you look under the hood.
Lansweeper's Asset Radar continuously captures all these network packets and analyses them to quickly capture information about the devices. These packets don't need to be addressed to your Lansweeper Server, nor does Lansweeper use any mechanics that your network isn't already using. This means we create a detection capability with minimal (or no) network impact, hence the name passive scanner. Furthermore, Passive Scanning does not disturb sensitive devices and avoids triggering alerts on security tools throughout the network.
While a passive scan will never return the level of detail about your assets you would expect from an active scan; we believe there are very good reasons to deploy both together.
One key reason we want to highlight is the completeness and timeliness of the information. Active network scanning takes more time to set up, is slower to run, and requires more resources than a passive scan. This means that the likelihood of picking up devices or vulnerabilities may slip through between active scans, but would be picked up and identified with a passive scan. In order to really dig in and get all relevant information from the asset, you do need an active credential-based scan of the device.
Have Your Cake and Eat It Too
With Lansweeper, you don't have to choose sides between active or passive scanning. You can set up Asset Radar in combination with a follow-up active Deepscan. This will get you the best of both worlds. You can get fast, real-time coverage of the devices active on your network without setting up any credentials using Asset Radar to quickly scope out your network; and track everything that connects to it. If you want to dig deeper, you can use our agentless Deepscan technology to get extensive data about these assets: hardware specs, installed software, user data, event logs, registry information, and so on to support any ITAMv2 scenario you are working on.
We believe this feature is a great addition to the Lansweeper functionality and see some interesting use cases:
⚡️ Detect Rogue Devices
Since Asset Radar listens 24x7 to network traffic to discover devices, even transient devices (those who only connect for a few seconds) are recorded and scanned. This instant detection means you can pick up possible rogue devices connecting to your network. We have a whole use case about Rogue Network Device Detection set up, for you to dive into.
⚡️ Tackle BYOD Challenges
With the rapidly expanding reality of Bring Your Own Device (BYOD), we see unmanaged devices lacking integration with IT management platforms increasing, bringing a host of security challenges along with them. We all know you can't secure what you don't know. Lansweeper's Asset Radar continuously monitors all asset activity, automatically tracking all newly introduced devices in your network, whether they are managed or unmanaged, Asset Radar will spot them for you. This effectively eliminates blind spots in your network.
We are sure there is a multitude of other exciting things you can do with Asset Rader, like quickly scoping out a new network or combining Asset Radar results with interesting reports and alerts. We would love to hear your thoughts, or even better, how you are leveraging this new capability to Know your IT!
If you got an interesting story to share on how you're using Asset Radar, don't hesitate to reach out to us using the form below.
Ready to set this up? Read more about enabling this feature.