Something appeared on the network last night.
SpacesIQ keeps reading every switch port across your buildings. A new device gets a name the same day. Where your rooms are mapped it gets a room too, and where they are not it is listed as unplaced.
Always on, every building
On your own hardware, or hosted by us in a region you choose. It watches every switch you point it at.
Read-only accounts on the switches already carrying your traffic.
It needs no SPAN port and reads no packet contents. Nothing is ever quarantined.
A device on a port it reads, in no room it knows, is listed as unplaced. It is never guessed into a room.
The tools you own were built for a different question.
Network access control sees what signs on the proper way. Endpoint protection sees what can run its software. Neither sees the switch a contractor left in a closet, or whatever is plugged into it.
The auditor finds whatever falls between them. Insurers now want that gap evidenced, and a signed statement no longer covers it.
On one campus the asset register accounted for roughly two thirds of what was live on the ports.
Worst at the top, in sentences you can act on.
- 1How many, by how bad
- 2What to do about it
It reads every port, every day, and tells you what moved.
Every managed switch, on a schedule you set, over read-only access.
Today's readings go against yesterday's, then against the reference library and your own record.
What changed is scored by consequence, so the queue opens with the thing most worth doing.
Unplaced means identified, with the room still unknown.
Most networks start with plenty. Here is how the number comes down.
- 1Map the switches to buildings first
Most unplaced devices are unplaced because the switch they sit on has no building assigned. Fixing that takes an afternoon, and it usually places most of them.
- 2Then map the ports to rooms where it matters
You do not need every port. Map the rooms somebody will be sent to, and leave the rest at building level.
- 3Leave the rest unplaced
An unplaced device is still fully identified and still on the report. Only its location is missing, and the report leaves the room blank instead of picking one.
Do you need a SPAN or mirror port?
Do you need a SPAN or mirror port?
No. SpacesIQ reads what the switch already knows, so there is nothing to mirror or tap, and packet contents are never examined.
How is this different from RoomIQ?
Same reading, wider scope. RoomIQ is organized around rooms. SpacesIQ watches every port on the network, including ports that belong to no room.
What happens when a device moves?
It is matched on hardware address. You see one device that moved, with both ports and both times.
Can it enforce policy?
No. It cannot block, quarantine or remediate, and it has no way to write to a device.
What does it do about a segment it cannot reach?
It reports the boundary. The segment is named, and it counts against the coverage figure.
A live list, and then a plan
SpacesIQ tells you what is on the network. Checking that against what you meant to build, and working out what fails if one link goes, is CrossConnect's job.
SpacesIQ next to the other sevenSpacesIQ hands you a live list for every building, which is where CrossConnect picks up: “Is it right, and what breaks if it fails?”
Bring one building.
Choose a building and bring read-only access to its switches. In thirty minutes we point SpacesIQ at them, and you see what is on the ports next to your own register, if you bring it.