Start Demo

Add or remove devices from the whitelist

When the device limit is exceeded, devices can be placed into limited analysis. Limited analysis means that the Discover appliance only collects L2 and L3 network throughput metrics for L3 devices. You can prioritize the devices by adding them to a whitelist. Those devices will always receive full analysis. You cannot add a device to the whitelist until the device is discovered by the ExtraHop system.

This topic provides the following procedures for working with the whitelist:

Add multiple devices to the whitelist

  1. Log into the Web UI on the Discover appliance.
  2. Click the System Settings icon and then click Device Limits.
  3. Search for and find the devices you want to add and then select the checkbox next to each device in the table.
  4. In the upper right corner above the table, click Add to Whitelist.

Add devices to the whitelist based on protocol activity

  1. Log into the Web UI on the Discover appliance.
  2. Click the System Settings icon and then click Device Limits.
  3. From the Device Limits page, click the any drop-down list and select type.
  4. In the Find field, click the drop-down arrow and then select an activity.
    For example, select Activity: HTTP Server to find all the devices associated with HTTP server metrics.
  5. Click Add to the Whitelist.

Add an individual device to the whitelist from a protocol page

  1. Log into the Web UI on the Discover appliance.
  2. Click Metrics and select Device in the left pane.
  3. Click a device name.
    A protocol page appears, which displays traffic and protocol metrics associated with the device.
  4. In the upper right corner of the page, click Properties.
  5. Click Add this device to the whitelist.
  6. Click Save.

Remove a device from the whitelist

  1. Log into the Web UI on the Discover appliance.
  2. Click the System Settings icon and then click Device Limits.
  3. Click the number next to Devices in Whitelist.
    The table displays each device reserved for full analysis.
  4. Select the checkbox next to the device name.
  5. Click Remove from Whitelist.
    Note:It is possible to add devices to a blacklist, based on their unique MAC addresses, by modifying the Discover appliance running configuration file. Contact your ExtraHop administrator to add devices to a blacklist.

Next steps

Published 2020-01-15 21:41