- 08 Oct 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Exploring Connections and Asset Relationships
- Updated on 08 Oct 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Relationships between assets indicate how they are connected in the environment and are shown as arrows linking the asset nodes in the graph. Axonius discovers these relationships during Discovery and correlation. You can also create custom relationships between assets of different types, as well as assets of the same type.
For example, a common relationship between assets of different types is that between devices and users. Devices are accessed by users. A user managing other users is an example of a relationship between assets of the same type.
In the graph, labels indicate the type of relationship between assets. For example:
- Last Used by - Indicates there are users associated with the asset.
- Has - Indicates that these assets have vulnerabilities associated with them.
- Affected by - Indicates other assets that affect another asset, such as settings.
- Accessing - Indicates that an asset is accessible or used by another asset, such as users.
When some members of one asset group have relationships to some members of another group or individual asset, hover over one of them to see relationship arrows between the assets.
Exploring Relationships
Use the Explore Relationships drawer to show assets with specific relationships to the node selected. For example, you can show all assets related to Users including related devices, software, managers, and more. You can also select to show the inverse, i.e., assets that have no connection to the selected asset. This is useful when looking for unmanaged assets and other scenarios where the lack of connection is important. See Managing Custom Relationships for more about creating custom relationships.
When a large number of assets are selected in the graph, a warning appears that system response time may be affected while the Explore Relationships action is in progress.
For the selected asset, you select a combination of an asset type (devices, software, tickets, users, etc.) and a relationship (Relates to, Used by, Has, Last used by, etc.) between the selected asset in the Asset Graph and the selected asset type. The available asset types and relationships are determined by the selections you make.
To explore relationships:
- Click on the node whose relationships you want to investigate and select Explore Relationships.
- Under Select asset types, select the asset types whose connections you want to view. You can select more than one asset type. Note that Filter Results is only available when one asset type is selected.
- Click Filter Results to define filter criteria to further refine which assets are displayed in the Asset Graph. See Filtering Asset Groups for more about creating filters.
- If you want to explore the default relationship, click Explore. Each asset type has a default relationship.
- If you want to explore other relationships, click Advanced Options, and then, under Select a relationship select the relationship you want to explore. Custom relationships also appear in this list. See Managing Custom Relationships for more about how Relationships work and how to create them.
- Also under Advanced Options, select whether to show assets that are related or unrelated.
- Related (default)- Shows assets that have are related to selected asset types.
- Unrelated - Shows the assets that do not have any connection with the selected asset. This is useful when looking for unmanaged assets and other scenarios where the lack of connection is important.
- Click Explore. The results are displayed in the Asset Graph.
For example, to see all assets related to Cisco devices, take the following steps (starting from the bottom of the steps list):
The results are displayed on the graph:
The select asset and the number of relationships are shown in the top left of the graph. In this example, Cisco(16).
Custom Relationships
Create custom relationships to define your own connections between asset types based on your needs and understanding of the environment, business structure, and logical functions.
See Managing Custom Relationships for more about how relationships work and how to create them.
Viewing a Single Asset's Adapter Connections
Use Segment by Entity to view an individual asset's adapter connections.
To view an asset's adapter connections:
Click on a single asset node and select Segment by entity.
The adapter connections are displayed as square icons. The number of assets using the connection is indicated on the node icon.
You can further explore the assets using these adapter connections by expanding and viewing the assets connected to them.