Explore the Discovery Sensor for OT
The Discovery Sensor for OT provides you with enhanced scanning and query functionality to manage your assets in the OT environment.
Discovery Sensor for OT overview
This section provides an overview of the Discovery Sensor for OT and its integration with the Discovery Console for OT. For detailed functionality and configuration, refer to Discovery Console for OT.
Sensors on the Discovery Console for OT
The Appliance page displays a list of all Sensors and Collectors that are associated with a Discovery Console for OT.
Sensor Information page
The Sensor Information page displays and shows configuration and status information for the Sensor you select. In the Appliances List page, select the name of a Sensor to view its information page. Each tab on the Sensor Information page is detailed in the next sections.
Most Sensors have similar configuration settings; however, each type of Sensor has different settings available based on their capabilities. These differences are described in the next sections.
Basic
This tab displays the basic configuration information for a Sensor. This includes the Sensor Name, Sensor Type, Serial Number, Firmware Version, and user definable location information that includes fields for the Latitude, Longitude, and Location Description for the Sensor.
Network
- Console Endpoint – Shows the IP address of the Discovery Console for OT that the Sensor is configured to use.
- Sensor Gateway – Shows the IP address assigned to the Sensor that is used to route traffic between networks.
- Management Interface – Connects the Sensor to an out-of-band network for communication with the Discovery Console for OT.
- Management Endpoint: Sets the IP address for the Sensor which it uses to communicate with the Discovery Console for OT.
- Management Subnet: Sets the subnet mask/Classless Inter-Domain Routing (CIDR) for the Sensor's communication with the Discovery Console for OT.
- (Optional) Management VLAN: Specifies the VLAN identifier that the management interface will use to tag network communications for participation in VLAN segregated networks.
- Span Interface: When enabled, allows the Sensor to enter a mode where it can collect all network traffic received on the ETHERNET 1 port. This allows the IDS to collect data from the network. When inactive, the Sensor can't perform any data collection.
- Ethernet Interfaces: Lists all Ethernet Interfaces for the Sensor. The list includes the Interface name and the MAC Address for each one.
Services
Under this tab you can configure specific services that run on a Sensor. Currently, the user can use this feature to enable or disable the SSH service on a Sensor. Select the Edit button and then select the toggle to turn the SSH service on or off. Under that are the Status and Updated On fields for the SSH service. Similarly, this page also allows users to enable or disable the Web Management service (see the Sensor Management Interface section for details) and view the corresponding Status and Updated On fields. The SSH service is enabled by default on all Sensors to facilitate post-installation configuration and may be inactive if necessary to match OT network security policies.
Services Config
Includes the Log Streaming Service and the Web Management Service. The Log Streaming Service can be used to stream logs from Sensors to the Discovery Console for OT. The Log Streaming Service also provides the ability to retain logged information for a longer time and may result in quicker customer issue resolution.
To enable the Log Streaming service for a specific Sensor, turn it on using the Log Streaming toggle in the Services section of that Sensor. Next, navigate to the Services Config section and select the log severity. The user may select the minimum log severity to include in the streaming for each Sensor. Selecting Debug will result in the most information being logged. You might consider enabling this feature with Debug as the selected severity level, unless the system is operating in a bandwidth-constrained environment. Select Save to make the changes permanent or select Cancel to undo.
The data streamed is not viewable in the Console UI. The Console only provides the ability to enable or disable the service and set the log severity level. Streamed log information is retained on the Console for 30 days.
The Web Management Service feature can be used to reset the password for the Web Management Service on the Sensor. To reset the password, select Edit, type a password into the edit field, enter it in the Confirm Password field, and select Save. Below the Confirm Password field are the Status and Updated On fields, which provide information about the Web Management Service on the Sensor.
Sites
The Sites tab displays Sensors that are associated to Sites during an Auto Query. The Allow/Deny setting indicates whether the Sensor is associated to the particular Site. The tab also displays the Site name, what setting is recommended for that Site, and the reason for the recommendation. A Deny recommendation means the Site does not appear to be related to the Sensor. An Allow recommendation means the Site’s network ranges match the Device IP. Allow can also mean the Site allows All Sensors.
Status
You can find the connection status of the Sensor on this tab. That includes the deployment status for basic configuration, network configuration, arpwatch network configuration, Allowlist configuration, policy, firmware updates, and security bypass mode updates.
Actions
You can use this menu button to select from several actions related to the Sensor. These actions include Deregister Sensor, Enable Bypass Mode, Reboot Sensor, Remove Sensor from Console (only for Sensors with Connection Lost status), View Allowlist, View Data Streams, and View Health Overview. The Actions list includes:
- Deregister Device – This setting deregisters the Sensor from the Console. This action resets the network settings to factory defaults and removes the Sensor from the Console.
- Reboot Device – This setting reboots the Sensor.
What to do next
To get started with the installation of the Discovery Sensor for OT, see .