Visibility and scanning of a variety of entities
AssigneeForescout Technologies, Inc.
InventorsAnderson Lam, Sharad Singh, Mihael Sudakovitch
Life of this patent
Estimating the term…
Abstract
Systems, methods, and related technologies for entity visibility are described. In certain aspects, information associated with a type of entity is accessed and a network is scanned for a plurality of entities. One or more entities are selected from plurality of entities based on the type of entity. Properties associated with the one or more selected entities are accessed. The information associated with the one or more selected entities and the one or more properties associated with the selected one or more entities are stored.
Claims17
A method comprising:
- accessing information associated with a type of entity to be monitored on a network;
- scanning the network for a plurality of entities;
- selecting, by a processing device, one or more entities of the plurality of entities based on the type of entity to be monitored on the network, wherein one of the one or more entities is a new entity;
- accessing one or more properties associated, respectively, with the selected one or more entities, including the new entity, of the plurality of entities based on the type of entity to be monitored on the network;
- accessing information associated with the new entity from another source based on the type of entity to be monitored on the network;
- storing information associated with the one or more selected entities, including the new entity, of the plurality of entities and the one or more properties associated with the selected one or more entities;
- and
- performing an action on an entity of the one or more selected entities of the plurality of entities based on a policy, wherein the action comprises preventing an account associated with a misconfigured firewall or router from accessing network resources.
A system comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, to:
- access information associated with a type of entity to be monitored on a network;
- scan the network for a plurality of entities;
- select one or more entities of the plurality of entities based on the type of entity to be monitored on the network, wherein one of the one or more entities is a new entity;
- access one or more properties associated, respectively, with the selected one or more entities of the plurality of entities based on the type of entity to be monitored on the network;
- access information associated with the new entity from another source based on the type of entity to be monitored on the network;
- store information associated with the one or more selected entities, including the new entity, of the plurality of entities and the one or more properties associated with the selected one or more entities;
- and
- perform an action on an entity of the one or more selected entities of the plurality of entities based on a policy, wherein the action comprises a poll for virtualization system information to determine a type of remediation action to take after checking permissions.
A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
- access information associated with a type of entity to be monitored on a network;
- scan the network for a plurality of entities;
- select, using the processing device, one or more entities of the plurality of entities based on the type of entity to be monitored on the network, wherein one of the one or more entities is a new entity;
- access one or more properties associated, respectively, with the selected one or more entities of the plurality of entities based on the type of entity to be monitored on the network;
- access information associated with the new entity from another source based on the type of entity to be monitored on the network;
- store information associated with the one or more selected entities, including the new entity, of the plurality of entities and the one or more properties associated with the selected one or more entities;
- and
- perform an action on an entity of the one or more selected entities of the plurality of entities based on a policy, wherein the action comprises a poll for virtualization system information to determine a type of remediation action to take after checking permissions.
Dependencies are inferred from the claim text.