ARX Watch: the company network, device by device

Every company network has devices that nobody has declared: a guest’s laptop, a printer, a NAS, a camera. They are often the weakest points, precisely because nobody checks them. ARX Watch finds them, using the ARXDOME probes already installed on your computers.

How it works

ARX Watch listens to the network through the probes already in place: the DHCP requests devices use to get an address and the network neighbor tables. This way it also sees devices with nothing installed on them.

At approved sites it can also run an active scan. Each new device is identified only once: open ports, service banners, certificates, SNMP, NetBIOS name.

The services found are checked over time and, when a new or unauthorized device appears, a notification goes to whoever has subscribed to it.

Why you need to see the whole network

Attacks often come in through what is not managed: a forgotten device, with a factory password, connected to the same network as the servers. You cannot protect what you cannot see.

ARX Watch works with ARX Sentry: discovered devices appear next to the monitored machines, so the picture of the network is complete.

What it offers: ARX Watch

Discovery of devices without a probe on the customer’s networks
Listening to DHCP requests and neighbor tables
Active scanning only at approved sites
Identification of ports, services, certificates, SNMP and NetBIOS
Monitoring of the services found
Notifications for new or unauthorized devices
Unexpected networks: a network that is not among the declared ones is flagged immediately, and can be investigated further with ARX Trace if the customer authorizes it