Manage Your Network Assets

The
Assets
page provides a central location from which you can view and investigate information relating to assets in your network. Using your defined internal network configurations, Broker VM Network Mapper, Cortex XDR Agent, EDR data collected from Firewall logs, and Third-Party logs, Cortex XDR is able to aggregate and display a list of all the assets located within your network according to their IP address.
To easily investigate your assets:
  1. Navigate to
    Assets
    Asset Management
    Assets
    .
    assets-table.png
  2. In the
    Assets
    table, filter and review the following fields:
    By default the table is filtered according to unmanaged assets over the last 7 days.
    Field
    Description
    IP ADDRESS
    IP address related to the last asset associated with it.
    MAC ADDRESS
    Mac address of the asset.
    HOST NAME
    Host name of the asset, if available.
    FIRST TIME SEEN
    Timestamp of when the IP address was first seen in the logs.
    LAST TIME SEEN
    Timestamp of when the IP address was last seen in the logs.
    AGENT INSTALLED
    Whether or not the asset has an agent installed.
    AGENT ID
    ID of the agent installed on the asset. Cortex XDR only displays agents that send EDR data captured in the firewall logs.
    COLLECTOR RUNNING
    Whether or not a Pathfinder Data Collectoris currently running on the asset.
    RANGE NAMES
    Name of the IP address range allocated to the IP address.
  3. Investigate an asset.
    Locate an IP address, right-click and select to:
    • Open asset view
      or —Pivot to the Asset View to view insights collected from the endpoint.
      Insights are only available for assets managed by a Cortex XDR Agent, if the asset is unmanaged, select
      Open IP View
      to view details of the associated IP address.
    • View agent details
      —Pivot to the Endpoints table filtered according to the agent ID. Only available for assets with Cortex XDR agent installed.
    • Open in Quick Launcher
      —Open the Quick Launcher search results for the IP address.
    • Remove Collector
      —Remove the Pathfinder Data Collector. Only available if a collector is status is
      In Process
      .

Recommended For You