Start Demo

Create a custom device

To collect metrics for a segment of traffic across multiple IP addresses and ports, you can create a custom device in the Discover appliance. Custom devices are useful for monitoring traffic outside of your local broadcast domain, such as branch offices, stores, or clinics. A single custom device counts as one device towards your licensed capacity for Advanced Analysis and Standard Analysis.

Custom devices replace the former pseudo devices feature. Any pseudo devices created on a previous version of ExtraHop firmware will remain on your Discover appliance until you migrate the pseudo device to a custom device. Unlike with pseudo devices, you do not need Admin UI privileges to configure a custom device.
Important:Custom devices affect ExtraHop system performance.

Here are some important considerations about custom devices:

  • Add a custom device to the watchlist to guarantee that the custom device receives Advanced Analysis.
  • Avoid creating multiple custom devices for the same IP addresses or ports. Custom devices that are configured with overlapping criteria might degrade system performance.
  • Avoid creating a custom device for a broad range of IP addresses or ports, which might degrade system performance.
  • Custom devices can only be created on a Discover appliance.
  • Custom devices appear in the ExtraHop system after traffic is observed that matches the IP address and port criteria that you specify.

The following steps show you how to create a custom device:

  1. Log into the Web UI of the Discover appliance.
  2. Click the System Settings icon and then click Custom Devices.
  3. On the Custom Device Settings page, click New. The Custom Device Configuration dialog box opens.
  4. Type a name for your custom device.
  5. Type a unique identifier.
    If you leave this field blank, an ExtraHop ID is automatically assigned to your custom device.
  6. Type a description.
  7. Click Add Criteria to specify the IP addresses and ports that you want to collect metrics for. You can provide a combination of criteria to collect metrics across multiple devices or for a single device. You do not need to complete each field.
    • In the IP Address field, type an IP address or a CIDR notation.
    • In the Source Min Port field, type a minimum source port.
    • In the Source Max Port field, type a maximum source port.
    • In the Destination Min Port field, type a minimum destination port.
    • In the Destination Max Port field, type a maximum destination port.
    Note:You cannot add VLAN criteria to a new custom device, or to an existing custom device that does not already have VLAN match criteria. Contact ExtraHop Support for more information.

Next steps

Published 2020-05-18 19:49