Device Security
ExtremeCloud IQ NAC Attribute Reference
Table of Contents
Expand All
|
Collapse All
Device Security Docs
ExtremeCloud IQ NAC Attribute Reference
This reference lists the attributes that Device Security collects from ExtremeCloud IQ NAC,
their names as stored in Device Security, and the Device Security fields they map to.
When Device Security integrates with ExtremeCloud IQ Site Engine, it
imports network access control data to improve visibility over connected devices. The
attributes in this reference cover NAC end system records and NetSight network device
data.
The third-party attribute name in Device Security refers to the attribute name
as it appears in the Assets Inventory table and in Query Engine. This follows the format
of third-party-name.attribute-name.
When viewing the attribute name in the Assets Inventory table column selector or on a
Device Details page, where the third-party name can be found as a header for the
attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the
Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.
NAC End System Attributes
Device Security collects end system attributes from the ExtremeCloud IQ Site Engine NAC End System web service. Each record describes a client device that has been profiled and authenticated through NAC.
|
ExtremeCloud IQ NAC Attribute
|
Device Security Attribute Name
|
Device Security Common Attribute*
|
Description
|
|---|---|---|---|
|
lastSeenTime
|
extremecloud_iq_site_engine.lastSeenTime
|
Last Third-Party Activity
|
Last seen time
|
|
firstSeenTime
|
extremecloud_iq_site_engine.firstSeenTime
|
First Seen
|
First seen time
|
|
state
|
extremecloud_iq_site_engine.state
|
connection_state
|
State
|
|
operatingSystemName
|
—
|
raw_os
|
Operating system name
|
|
nacProfileName
|
extremecloud_iq_site_engine.nacProfileName
|
—
|
NAC profile name
|
|
hostName
|
extremecloud_iq_site_engine.hostName
|
Hostname
|
Host name
|
|
ip
|
extremecloud_iq_site_engine.ip
|
ipv4_address
|
IP address
|
|
lastAuthEventTime
|
extremecloud_iq_site_engine.lastAuthEventTime
|
network_authentication_timestamp
|
Last authentication event time
|
|
switchPort
|
extremecloud_iq_site_engine.switchPort
|
Switch Port
|
Switch port
|
|
switchIP
|
extremecloud_iq_site_engine.switchIP
|
Switch IP
|
Switch IP address
|
|
username
|
extremecloud_iq_site_engine.username
|
AD Username
|
Username
|
|
macAddress
|
extremecloud_iq_site_engine.macAddress
|
MAC; id
|
MAC address
|
|
authType
|
extremecloud_iq_site_engine.authType
|
network_authentication_method
|
Authentication type
|
|
zoneProtectionActive
|
extremecloud_iq_site_engine.zoneProtectionActive
|
—
|
Zone protection active
|
|
stateDescr
|
extremecloud_iq_site_engine.stateDescr
|
—
|
State description
|
|
source
|
extremecloud_iq_site_engine.source
|
—
|
Source
|
|
siteId
|
extremecloud_iq_site_engine.siteId
|
—
|
Site ID
|
|
reason
|
extremecloud_iq_site_engine.reason
|
—
|
Reason
|
|
nacApplianceIP
|
extremecloud_iq_site_engine.nacApplianceIP
|
—
|
NAC appliance IP address
|
|
nacApplianceGroupName
|
extremecloud_iq_site_engine.nacApplianceGroupName
|
—
|
NAC appliance group name
|
|
id
|
extremecloud_iq_site_engine.id
|
—
|
Record ID
|
|
extendedState
|
extremecloud_iq_site_engine.extendedState
|
—
|
Extended state
|
|
assmtHashCode
|
extremecloud_iq_site_engine.assmtHashCode
|
—
|
Assessment hash code
|
NetSight Device Attributes
Device Security collects network device attributes from the ExtremeCloud IQ Site Engine NetSight device web service. Each record describes a managed network infrastructure device such as a switch or access point.
|
ExtremeCloud IQ NAC Attribute
|
Device Security Attribute Name
|
Device Security Common Attribute*
|
Description
|
|---|---|---|---|
|
timeLastUpdated
|
extremecloud_iq_site_engine.timeLastUpdated
|
Last Third-Party Activity
|
Time last updated
|
|
sysObjectId
|
extremecloud_iq_site_engine.sysObjectId
|
—
|
System object ID
|
|
sysName
|
extremecloud_iq_site_engine.sysName
|
—
|
System name
|
|
sysLocation
|
extremecloud_iq_site_engine.sysLocation
|
Location
|
System location
|
|
sysDescriptor
|
extremecloud_iq_site_engine.sysDescriptor
|
Description
|
System descriptor
|
|
sysContact
|
extremecloud_iq_site_engine.sysContact
|
—
|
System contact
|
|
snmpContext
|
extremecloud_iq_site_engine.snmpContext
|
—
|
SNMP context
|
|
profileName
|
extremecloud_iq_site_engine.profileName
|
—
|
Profile name
|
|
ip
|
extremecloud_iq_site_engine.ip
|
ipv4_address
|
IP address
|
|
nickName
|
extremecloud_iq_site_engine.nickName
|
—
|
Nickname
|
|
deviceId
|
extremecloud_iq_site_engine.deviceId
|
—
|
Device ID
|
|
deviceDisplayType
|
extremecloud_iq_site_engine.deviceDisplayType
|
—
|
Device display type
|
|
deviceDisplayName
|
extremecloud_iq_site_engine.deviceDisplayName
|
Hostname
|
Device display name
|
|
deviceDisplayFamily
|
extremecloud_iq_site_engine.deviceDisplayFamily
|
—
|
Device display family
|
|
chassisId
|
extremecloud_iq_site_engine.chassisId
|
—
|
Chassis ID
|
|
baseMac
|
extremecloud_iq_site_engine.baseMac
|
MAC; id
|
Base MAC address
|
|
firmware
|
—
|
latest_firmware_version
|
Firmware
|
* Only some attributes map to a Device Security Common Attribute.