.png?sv=2022-11-02&ss=b&srt=o&spr=https&st=2024-04-25T16%3A05%3A23Z&se=2024-04-25T16%3A15%3A23Z&sp=r&sig=gjNeg%2FlYiIG1k%2BIaVa75zjh9uLfZQdFqYlATJ8qeAww%3D){kind=logo}
Portnox CLEAR - Enrich Asset Data
- 28 Jan 2024
- 2 Minutes to read
- Print
- DarkLight
- PDF
Portnox CLEAR - Enrich Asset Data
- Updated on 28 Jan 2024
- 2 Minutes to read
- Print
- DarkLight
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
Portnox CLEAR- Enrich Asset Data enriches each of the devices that are the result of the query run (based on MAC address) with additional data from Portnox, such as:
- Access point IP address - If a wireless device is connected to a wireless access point.
- Failed Portnox compliances rules - If the device failed the Portnox authentication process.
- Last seen - the date and time of the last Portnox probe/trap/ping for this device.
- Status - The device status. The possible values are:
- Rogue – Device failed to be authenticated by Portnox.
- UnderAuthentication – Device currently undergoing Portnox authentication.
- Authenticated – Device successfully passed authentication.
- NonComplied – One or more compliance rules were not satisfied.
- List of users logged in to this device.
- IP address, MAC address and MAC vendor.
- Operating system.
- SSID - For a wireless device connected to a wireless access point, this field is the name of the SSID assigned to the device by the wireless controller.
- Switch IP address, moduel and port - For wired devices.
- Virtual host and switch - For virtual machines.
See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.
General Settings
- Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
- Add description - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
- Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
- A query only returns results for the asset type it was created for.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs, Adapters Fetch History, and Asset Investigation modules.
- See Actions supported for Vulnerabilities.
- See Actions supported for Software.
- Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
- Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.
Requried Fields
These fields must be configured to run the Enforcement Set.
- Portnox domain - Specify the Portnox domain.
- User name - Enter the Portnox user name.NOTEThe user must be a member of the ARMRead user groups.
- Password - Enter the Portnox password.
Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.
Additional Fields
These fields are optional.
Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
For more details about other Enforcement Actions available, see Action Library.
Was this article helpful?