NNeettwwoorrkk DDiissccoovveerryy

February 15, 2012

NNeettwwoorrkk DDiissccoovveerryy

User Guide

version 1.2

About Kaseya

Kaseya is a global provider of IT automation software for IT Solution Providers and Public and Private Sector IT organizations. Kaseya's IT Automation Framework allows IT Professionals to proactively monitor, manage and maintain distributed IT infrastructure remotely, easily and efficiently with one integrated Web based platform. Kaseya's technology is licensed on over three million machines worldwide.

Copyright © 2000-2012 Kaseya International Limited. All Rights Reserved.

i

Contents

Network Discovery Overview ..................................................................................................................... 1

Network Discovery System Requirements ............................................................................................... 2

Devices ......................................................................................................................................................... 2

Page Layout ......................................................................................................................................... 3

Explorer Grid ........................................................................................................................................ 3

Control Panel ....................................................................................................................................... 4

Network Discovery Columns .............................................................................................................. 5

Device Inspector Panel ....................................................................................................................... 7

Edit Moniter Networks ................................................................................................................. 9

Network Diagram ................................................................................................................................. 9

Install/Remove ........................................................................................................................................... 10

Collector Status ......................................................................................................................................... 10

Glossary of Terms ..................................................................................................................................... 11

Index ........................................................................................................................................................... 13

1

Network Discovery Overview The Network Discovery (KND) module discovers machines and devices on a network, identifies their components and displays analysis charts of real time performance.

Network discovery begins once the Network Discovery client--called a collector--is installed, using a machine with an existing Kaseya agent. Unlike LAN Watch, which is limited to a maximum of 1024 IP addresses, the entire subnet is scanned. Once the collector is installed on a subnet Network Discovery requires no further configuration.

Discovery of a machine or device—both referred to hereafter simply as a device—-begins by revealing the network configuration for that device. Configuration attributes include the subnet the device is on, its IP address, the device's open ports, and whether or not the device is SNMP enabled. If the device is SNMP enabled, Network Discovery performs an SNMP walk, this time identifying the status of SNMP objects and instances found on the device. If necessary, you can set or reset the community name of SNMP devices.

You can click any active SNMP object/instance supported by a device and get a real time display of the most commonly used performance-monitoring metric for that object. Once discovered, SNMP monitoring continues automatically.

Network Discovery's scanning and data requirements are very small. NMAP--a secure, lightweight scanning utility--performs command line scans of the LAN every two hours for rapid retrieval of network object attributes. Network Discovery uses a utility called RRDtool to provide automatic monitoring and graphic display of SNMP-enabled devices. Graphic results are plotted vs time into day, week, month and year graphs. RRDtool uses a "round-robin database" (circular buffer) design so the system storage footprint on the collector remains constant over time, no more than 500 kb per SNMP device.

Use Network Discovery for:

Host and Device Discovery - Identifying hosts and devices on a network, for example listing the hosts which respond to pings.

Port Scanning - Enumerating the open ports on each device.

OS and Hardware Detection - Remotely determining the operating system and some hardware characteristics of network devices.

SNMP Discovery - Identifying active SNMP objects and instances on SNMP-enabled devices.

Note: See System Requirements.

Functions Description

Devices (page 2) Discovers machines and devices on a network, identifies

their components and displays analysis charts of real time

performance.

Install/Remove (page

10)

Installs and uninstalls a collector on a Windows machine

with an agent.

Collector Status (page

10)

Displays the status of all collector on all networks managed

by the VSA.

2

Network Discovery System

Requirements KServer

The Network Discovery module installs on VSA 6.1 or later

Requirements for Each Network Discovery Collector (page ii)

Windows OS: XP, Vista, Server 2003, Server 2003 R2, Server 2008, Server 2008 R2, or Windows 7

.Net 3.5 for Server 2008 and Server 2008 R2. All other operating systems install .Net 3.5 automatically.

2 GB free space on the hard drive minimum

Microsoft Windows Installer 2.0

800 MHz CPU or greater

2 GB RAM minimum

Note: See general System Requirements.

Devices

Network Discovery > Devices

The Devices page discovers machines and devices on a network, identifies their components and displays analysis charts of a component's real time performance.

Page Layout (page 3)

Explorer Grid (page 3)

Control Panel (page 4)

Network Discovery Columns (page 5)

Device Panel (page 7)

Network Diagram (page 9)

3

Page Layout

The layout of the Devices (page 2) page comprises the following main panels:

N a v ig a t io n

P a n e l

S e le c te d

C o lu m n S e t

E x p lo r e r G r id

D e v ic e

P a n e l

D e v ic e

In s p e c to r

D e v ic e

D e ta i ls

C o n t r o l P a n e l

D e v ic e

H e a d e r

P a g e B r o w s e r R o w s P e r P a g e

M a c h in e ID / G r o u p ID f i l te r

Navigation Panel - Used to navigate to the Network Discovery module. There are three functions: Devices (page 2), Install/Remove (page 10) and Collector Status (page 10).

Explorer Grid - Each a machine or a device—both considered a device in this context—is listed in this panel.

Page Browser - If more than one page of devices displays, pages forwards and back.

Rows Per Page - Sets the number of devices displayed per page: 10, 30 or 100.

Control Panel - Executes tasks, either for the entire Explorer Grid or for a single selected device.

Device Panel - This expandable/collapsible panel displays the properties and status of a single device.

Device Header - Identifies the selected device in the Explorer Grid.

Device Details - Displays up to four tabs.

Summary - Displays additional static information about the device.

System - Displays an expandable/collapsible tree of a device's hardware and software components. Clicking an individual component in the System tree usually displays a graph of its performance data in the Device Inspector Panel. Not all components have data to graph.

Events - Lists a series of events such as ports scanned and when.

Collectors - Only displays if a device is a collector. Displays the collector's current activity, range of IP addresses scanned, and a listing of logs of recent collection events.

Device Inspector - Displays a graphic, if available, of the latest performance data for a component selected in the System tab of the Device Details Panel. The graphic constantly refreshes and can display performance data for different time periods.

Note: - Double-clicking a device in the Explorer Grid displays a popup window of the Header, Details and

Inspector panels for that device, along with controls that can be executed for that single device.

Explorer Grid

The Explorer Grid of the Devices (page 2) page lists each device in a network—in this context either a machine or a device.

4

The set of columns displayed is determined by the Column Set selection in the Control Panel (page

4). The currently selected column set displays in the bar just above the Explorer Grid. You can customize (page 5) the set of columns that displays.

Check-in icons identify managed machines. Machines with agents installed on them can be used as collectors.

Machines discovered on the same network as the collector, but without an agent installed on them, display with either a green traffic icon if they are currently online or a red traffic icon if they are currently offline.

If a discovered device has a host name, the device is identified by its host name, plus the group and organization of the collector that discovered it. If the discovered device has no host name, its IP address is used in place of the host name.

Page forward displays multiple pages of devices.

Devices per page sets the number of rows on each page.

A green check in the SNMP column identifies a device as SNMP enabled. No status is displayed for agent-managed machines that are not yet managed by collectors.

Control Panel

The Control Panel at the top of the Devices (page 2) page executes tasks, either for the entire Explorer Grid (page 3) or for a single selected device. Each VSA user's preferences concerning the view, column set selection and columns selected for that column set are stored between logon sessions.

View

Right – The Explorer Grid and Device Panel are oriented side by side.

Bottom – The Explorer Grid and Device Panel are oriented on top of one another.

Actions

Device Type - Change the device type of selected devices. Discovered items can be sorted by device type classification.

Open - Display Device Inspector (page 7) information for a selected device in a new window.

5

Column Sets

Column sets determine the set of columns displayed in the Explorer Grid.

Modify Columns - Customize (page 5) the set of columns displayed.

Discovered - Only displays devices discovered by KND. Does not include machines with agents checking into the VSA from another subnet.

Summary/All - Displays all discover devices as well as machines with agents checking into the VSA from another subnet.

Collectors - Displays managed machine serving as collectors. This is the same view displayed when clicking the Network Discovery > Collector Status (page 10) page.

Managed Agents - Displays managed machines. This is the same view displayed when clicking the Network Discovery > Install/Remove (page 10) page. A collector can only be installed on a machine with an agent.

Hardware - Displays hardware columns: processor and RAM.

Network - Displays network columns: IP address, connection gateway, and MAC address.

Collector

Install - Install discovery components on the selected devices.

Uninstall - Uninstall discovery components on selected devices.

Open Diagram - Displays a network diagram of discovered devices. Enabled only if the selected device is a collector.

Refresh - Stops the collector service, checks for any updated files, then restarts the collector service. This can help solve problems with a collector that is not functioning properly.

Install Agent

Installs an agent install package on selected machines. A dialog prompts you to select the agent install package and, if necessary, enter the logon credential for one or more target machines.

Monitoring

Scan Now - Deep scans run every two hours. Clicking this button resets the selected devices to scan now and resets the next deep scan to run two hours later, on a recurring basis.

Monitor Device - Sets a discovered device to be scanned and monitored, if has previously been set to be ignored. Devices are scanned and monitored by default.

Ignore Device - Sets a discovered device to be ignored by when scanning. An ignored icon displays when a device is not being scanned and monitored.

Set SNMP Community - Set SNMP Community password on the selected device. If SNMP is enabled on a device and no monitoring data is returned the SNMP community password may be invalid.

Clear SNMP Community - Reset SNMP Community password on selected devices to public.

Network Discovery Columns

The following columns are available to select when modifying any column set in the Explorer Grid (page 3). Select Column Set > Modify Columns in the Control Panel (page 4) to modify a currently displayed column set.

Basic

Device Name - If a discovered device has a host name, the device is identified by its host name, plus the group and organization of the collector that discovered it. If the discovered device has no host name, its IP address is used in place of the host name.

6

Device Type - A Network Discovery classification of the device, initially based on discovered attributes. A device can be manually assigned to any device type using Devices > Control Panel > Actions > Device Type.

Id - A unique identify for the device within the Network Discovery module.

Machine Group - The machine group and organization the device is associated with. If the device is a computer without a Kaseya agent, or a device that cannot install an agent, the machine group of the collector that discovered the device is used.

Name - The name identifying the device within the VSA. Displays an IP address if the device does not have a host name.

Collector

Collector Name - The name of the collector that discovered the device.

Collector Status - The status of the collector. No data displays for non-collector rows.

Monitoring

InCollector - If a managed by collector icon displays, this computer is managed by a collector.

IsCollector - If a collector icon displays, this computer is a collector.

Last Detected - The last time the device was detected in a scan.

Last Detected Elapsed - The number of minutes that have elapsed, since this device was detected in a scan.

Last Snmp Scan - The last time an SNMP scan was attempted on this device.

MonitoringDisabled - If an ignored icon displays, this device is not scanned or monitored.

Port Count - The number of open ports for this device.

Source - The source scanning tool: NMap.

Network

Ip Address - IP address assigned to the machine, in version 4 format.

MAC Address - MAC address of the LAN card used to communicate with the KServer.

SNMP - If checked, SNMP is enabled.

System

OSType - Operation system type the machine is running.

ShortOsType - Displays an icon for the type of OS or device type.

VSA

Only Kaseya agent managed machines display data for most of these fields.

AgentId - The unique GUID of the Kaseya agent.

Agent Install Status - Installed if a Kaseya agent is installed. Not installed if no Kaseya

agent is installed.

Bus Speed - Motherboard bus speed.

Chassis Manufacturer - Manufacturer of the enclosure.

Chassis Serial Number - Serial number on the enclosure.

Chassis Type - Enclosure type.

Chassis Version - Enclosure version number.

Computer Name - Computer name assigned to the machine.

Connection Gateway - IP address seen by the KServer when this machine checks in. If the machine is behind a DHCP server, this is the public IP address of the subnet.

Default Gateway - Default gateway assigned to the machine.

Dhcp Enabled - If checked, DHCP is enabled for this machine.

7

DHCP Server - The IP address of the DHCP server used by this machine.

DNS Server 1 - IP address of the DNS server assigned to the machine.




Login Name - The user currently logged on.

Manufacturer - System manufacturer.

Max Memory Size - Max memory size the motherboard can hold.

MotherBoard Manufacturer - Motherboard manufacturer.

MotherBoard Product Code - Motherboard product ID.

MotherBoard Serial Number - Motherboard serial number.

MotherBoard Version - Motherboard version number.

OnlineStatus - Machines discovered on the same network as the collector, but without an agent installed on them, display with either a green traffic icon if they are currently online or a red traffic icon if they are currently offline. Check-in icons identify managed machines.

Primary Wins Server - WINS settings.

Product Name - System product name.

Secondary Wins Server - WINS settings.

Subnet Mask - Networking subnet assigned to the machine.

System Serial Number - System serial number.

Wins Enabled - If checked, WINS is enabled.

Device Inspector Panel

The Device Inspector Panel of the Devices (page 2) page is a an expandable/collapsible panel that displays the properties and status of a single device selected from the Explorer Grid (page 3). The Device Panel has three sections: a Device Header section, a Device Details section and the Device Inspector section.

Device Header

The Header section of the Device Panel the main identifiers for the selected device.

8

Name - The name of the device.

OS - The type of device or operating system.

Network - The network the device belongs to. The name of the network is expressed as the starting IP address of a range of IP addresses on the network, followed by number of bits—for example, /24—representing the network portion of the IP address.

Device Details

The Details section of the Device Panel displays properties and other types of information about the device.

Summary - The tab provides additional general information about the device.

Name - The name of the device.

IP Address - The IP address of device on the network.

Last Detected - The last time the device was detected.

SNMP Enabled - Yes, in enabled.

OS - The type of device or operating system.

Network

Location Address

Logged In

RAM

System - Displays an expandable/collapsible tree of a device's hardware or software components. If performance data exists for a hardware or software component, clicking the component in the System tree displays a graph of the performance data in the Device Inspector Panel. Types of hardware and software components can include:

Interfaces

CPUs

File Systems

Memory

Ports

Windows services

Events - Lists discovery events for this device, such as the detection of a new port or starting or stopping of a Windows service.

Collectors - Only displays if a device is a collector (page 11). Displays the collector's current activity, the range of IP addresses scanned, and a listing of logs of recent collection events.

The range of IP address can be edited. (page 9)

Click a linked log of a scan to see the detail data collected by NMap (page 11) during that scan.

Device Inspector

The Device Inspector section of the Device Panel displays an analysis chart of the latest performance data for a component selected in the System tab of the Device Details section. The analysis chart can display performance data for different, selectable time periods: day, week, month and year. Inbound is plotted in green. Outbound is plotted in blue.

Device Inspector data for a device is stored on the managed machine acting as the collector. As long as the collector itself is actively checking into the the VSA, performance data for the device can be inspected within Network Discovery even if the device itself is momentarily offline. When the device is online, the graphic is constantly refreshed. The data storage for each device is very small, because the Device Inspector only stores the latest "moving average" values appropriate for each time scale.

Note: - Double-clicking a device in the Explorer Grid displays a popup window of the Header, Details and

Inspector panels for that device, along with controls that can be executed for that single device.

9

Edit Moniter Networks

Network Discovery > Devices > Device Inspector Panel > Collector tab > pencil icon

Clicking the pencil icon on the Collector tab of the Device Inspector Panel displays the Edit Monitored Network dialog. This dialog allows you edit the range of IP addresses being scanned.

Note: Changing the IP range of addresses in this dialog does not enable network access to those IP

addresses by the collector. The collector's location on the network must support the target range of IP

addresses specified for device discovery.

IP Range - Change the range of IP addresses specified for network discovery of devices. Ranges of IP address can be specified as follows.

10.10.10.1-254 - All IP addresses between 10.10.10.1 and 10.10.10.254.

10.10.10-12.1-254 - All IP addresses between 10.10.10.1 and 10.10.12.254.

192.168.0.1/24 - All IP addresses between 192.168.0.1 and 192.168.0.254

Exclusion - Exclude IP addresses from being included in network discovery.

10.10.10.5, 10.10.10.16 - Excludes both of these IP addresses.

10.10.10.60-69 - Excludes this range of IP addresses.

Location - Enter a description of the range of IP addresses specified.

Network Diagram

Network Discovery > Devices > Collector > Open Diagram

A network topology diagram displays machines discovered by a single collector in a popup window.

Select the Collector icon next to a collector device from the Explorer Grid (page 3).

Click any device box displayed in the diagram, then select Open Device Inspector to display the Device Inspector for that device.

Use the Resize, Fill Frame and Line Length tools to adjust the display of the diagram.

Filter the machines displayed using the machine ID/group ID filter.

D e v ic e T y p e s

fo ld e r t r e e

D e v ic e In s p e c to r M a c h in e ID /G r o u p ID f i l te r

R e s iz e

F i l l F r a m e

D ia g r a m S ty le

L in e L e n g th

10

Install/Remove

Network Discovery > Install/Remove This page also displays by clicking the Collector option in the Control Panel (page 4) of the Devices page.

The Install/Remove page installs a collector on a Windows machine with an agent. Only one collector is required for each subnet of a network. This page can also uninstall a collector.

Note: See the Devices (page 2) page for a description of all other controls and panels on this page.

Installing a Collector

1. Select a managed machine row in the Explorer Grid (page 3).

The Collector Status for the selected row should be blank. This indicates the managed machine is not already a collector.

2. Click the Collector > Install button in the Control Panel.

Removing a Collector

1. Select a managed machine row in the Explorer Grid.

The Collector Status for the selected row shows some text. This indicates the managed machine is a collector.


Collector Status

Network Discovery > Collector Status This page also displays by clicking the Column Set > Collectors option in the Control Panel (page 4) of the Devices

page.

The Collector Status page lists all collectors on all networks managed by the VSA. Use this page to determine the Collector Status of each collector in the VSA.

Note: See the Devices (page 2) page for a description of all other controls and panels on this page.

Removing a Collector

You can uninstall a collector from a managed machine using this page.

1. Select a managed machine row in the Explorer Grid (page 3).

The Collector Status for the selected device displays a collector icon.


Glossary of Terms

11

Glossary of Terms Agents

The VSA manages machines by installing a software client called an agent on a managed machine. The agent is a system service that does not require the user to be logged on for the agent to function and does not require a reboot for the agent to be installed. The agent is configurable and can be totally invisible to the user. The sole purpose of the agent is to carry out the tasks requested by the VSA user. Once installed:

An agent icon—for example the agent icon—displays in the system tray of the managed machine. Agent icons can be custom images or removed altogether.

Each installed agent is assigned a unique VSA machine ID / group ID / organization ID. Machine IDs can be created automatically at agent install time or individually prior to agent installation.

Each installed agent uses up one of the available agent licenses purchased by the service provider.

Agents are typically installed using packages created using Agent > Deploy Agents inside the VSA.

Multiple agents can be installed on the same machine, each pointing to a different server.

A check-in icon displays next to each machine ID in the VSA, displaying the overall status of the managed machine. For example, the check-in icon indicates an agent is online and the user is currently logged on.

Clicking a check-in icon displays a single machine interface for the managed machine called Live Connect. Live Connect provides instant access to comprehensive data and tools you need to work on that one machine.

Hovering the cursor over a check-in icon displays an agent quick view window immediately. You can launch an agent procedure, view logs or launch Live Connect from the agent quick view window.

Collector

Network discovery begins once the Network Discovery client--called a collector--is installed, using a machine with an existing Kaseya agent. Unlike LAN Watch, which is limited to a maximum of 1024 IP addresses, the entire subnet is scanned. Once the collector is installed on a subnet Network Discovery requires no further configuration.

NMap

NMAP--a secure, lightweight scanning utility--performs command line scans of the LAN every two hours for rapid retrieval of network object attributes.

RRDtool

Network Discovery uses a utility called RRDtool to provide automatic monitoring and graphic display of SNMP-enabled devices. Graphic results are plotted vs time into day, week, month and year graphs. RRDtool uses a "round-robin database" (circular buffer) design so the system storage footprint on the collector remains constant over time, no more than 500 kb per SNMP device.

SNMP Community

An SNMP community is a grouping of devices and management stations running SNMP. SNMP information is broadcast to all members of the same communiity on a network. SNMP default communities are:

Write = private

Read = public

Glossary of Terms

12

SNMP Devices

Certain network devices such as printers, routers, firewalls, servers and UPS devices can't support the installation of an agent (page 11). But a VSA agent installed on a managed machine on the same network as the device can read or write to that device using simple network management protocol (SNMP).

Index

13

Index

A

Agents • 11

C

Collector • 11 Collector Status • 10 Control Panel • 4

D

Device Inspector Panel • 7 Devices • 2

E

Edit Moniter Networks • 9 Explorer Grid • 3

I

Install/Remove • 10

N

Network Diagram • 9 Network Discovery Columns • 5 Network Discovery Overview • 1 Network Discovery System Requirements • 2 NMap • 11

P

Page Layout • 3

R

RRDtool • 11

S

SNMP Community • 11 SNMP Devices • 12

Documents

NNeettwwoorrkk DDiissccoovveerryy