General principles
Active Discovery allows the sensor to send packets to the network to discover previously unseen devices and gather additional properties for known devices.
There are two different types of Active Discovery operations:
- Broadcast
The sensor sends Broadcast packets targeting all the devices in the subnet. Devices that support the protocol will give a response back and appear in Cisco Cyber Vision.
- Unicast
The sensor sends Unicast packets to known components and analyses the responses received.
The protocols supported for Active Discovery operations are:
-
Broadcast:
-
EtherNet/IP
-
Profinet
-
SiemensS7
-
ICMPv6
-
-
Unicast:
-
EtherNet/IP
-
SiemensS7
-
SNMPv2c
-
SNMPv3
-
WMI
-
For more information about discoverable properties, refer to Annex: Active Discovery protocols.