cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
jdmhw6
Engaged Sweeper II
I like the ability to find rogue devices. We do have scanner servers deployed to remote subnets for deployment/scanning/etc. But the intro to asset radar sounds much more appealing with how it can detect rogue devices. But yet none of the documentation/links from the intro actually leads to a report/alert that can be setup for rogue devices. The All scanners asset radar page just dumps every asset. If it had a filter to get rid of "known" assets, that'd be much more helpful.

Currently it seems worthless.

If anyone has figured out how to effectively use this feature, please let me know how you're doing it!

Thanks
1 ACCEPTED SOLUTION
rader
Champion Sweeper III

Not entirely sure if this would be the answer your looking for, but I use this report to send me emails whenever a new device shows up on my network.

New assets seen in the past hour

Select Top (1000000) tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypename As Type,
  tblAssets.IPAddress,
  tblAssets.Description,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblAssetCustom.Location,
  tsysIPLocations.IPLocation,
  tblAssets.Firstseen As [Created at],
  tblAssets.Lastseen As [Last successful scan]
From tblAssetCustom
  Inner Join tblAssets On tblAssetCustom.AssetID = tblAssets.AssetID
  Inner Join tsysAssetTypes On tblAssets.Assettype = tsysAssetTypes.AssetType
  Left Outer Join tsysIPLocations On tsysIPLocations.LocationID =
      tblAssets.LocationID
Where tblAssets.Firstseen > GetDate() - 1 And tblAssets.Firstseen >
  DateAdd(HOUR, -1, GetDate()) And tblAssetCustom.State = 1 And
  tblAssets.Assettype <> -1 And tblAssets.Assettype <> 66
Order By tblAssets.AssetName

Then in my E-mail/Export reports section I added this highlighted section to get the reports straight in my inbox.

rader_0-1677787849193.png

Result looks like this:

rader_1-1677787970692.png

Hope this helps.

 

 

View solution in original post

3 REPLIES 3
rader
Champion Sweeper III

Not entirely sure if this would be the answer your looking for, but I use this report to send me emails whenever a new device shows up on my network.

New assets seen in the past hour

Select Top (1000000) tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypename As Type,
  tblAssets.IPAddress,
  tblAssets.Description,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblAssetCustom.Location,
  tsysIPLocations.IPLocation,
  tblAssets.Firstseen As [Created at],
  tblAssets.Lastseen As [Last successful scan]
From tblAssetCustom
  Inner Join tblAssets On tblAssetCustom.AssetID = tblAssets.AssetID
  Inner Join tsysAssetTypes On tblAssets.Assettype = tsysAssetTypes.AssetType
  Left Outer Join tsysIPLocations On tsysIPLocations.LocationID =
      tblAssets.LocationID
Where tblAssets.Firstseen > GetDate() - 1 And tblAssets.Firstseen >
  DateAdd(HOUR, -1, GetDate()) And tblAssetCustom.State = 1 And
  tblAssets.Assettype <> -1 And tblAssets.Assettype <> 66
Order By tblAssets.AssetName

Then in my E-mail/Export reports section I added this highlighted section to get the reports straight in my inbox.

rader_0-1677787849193.png

Result looks like this:

rader_1-1677787970692.png

Hope this helps.

 

 

rdefulio
Engaged Sweeper

Did you ever find a solution to this issue? I am trialing LanSweeper for this exact function and I have the same questions. I was hoping for an alert when a new device is detected, and a report that listed devices that were added and removed from the network in a particular date range. I also was hoping for some intelligence, such as when a DHCP IP address changes. 

sticky
Engaged Sweeper III
Old post I know, but I'd like an answer to this too. Am trying to get an idea of how many new assets I'm likely to see as I'd like to capture the rogue machines, but am concerned I'm gonna blow my license limit.

As said above, if the asset radar page indicated if it's an existing or new asset, would be much better.