Change or add a device role

The ExtraHop system automatically discovers and classifies devices on your network. You can search for devices by their observed IP address, hostname, activity, or MAC address. Based on the type of traffic and protocol activity associated with a device, the ExtraHop system can automatically assign a role to a device, such as database or file server, to classify device behavior. You can add or change a device role at anytime.

  1. Log into the Web UI on the Discover or Command appliance.
  2. Find a device and then click the device name.
    A protocol page appears, which displays traffic and protocol activity for the selected device.
  3. Select Overview in the left pane below the device name.
  4. In the Manage Device section in the upper right corner of the page, click Properties.
  5. In the Device Role section, click the drop-down list and select one of the following roles:

    Gateway: Assign to a device that acts a router or gateway. The ExtraHop system automatically assigns the gateway role to an L2 device with a large amount of unique IP addresses (past a certain threshold) are associated with that device. Gateway device names include the router name (for example, “Cisco B1B500”). Unlike an L2 parent device, Gateway devices are a type of L2 device that is counted against a device limit.

    Database (DB) server: Assign to a device when there are database responses sent from this device.

    File server: Assign to a device when there are NFS and CIFS responses sent from this device.

    Web (WWW) Server: Assign to a device when there are observed HTTP responses sent from this device.

    Auto (Default): Assign to a device when the traffic does not clearly identify a single role.

    Load balancer: Assign to a device to classify the device as a reverse proxy that distributes traffic across multiple servers. The ExtraHop system does not automatically assign the Load balancer role to a device.

    Firewall: Assign to a device that monitors incoming and outgoing network traffic and blocks traffic according to security rules. The ExtraHop system does not automatically assign the Firewall role to a device.

  6. Click Save.
Published 2017-11-20 17:13