Home
Reference Guides
Additional reference guides.
Discovery Strategies
Strategies
Strategies overview
Discovery strategies are network-based methods that identify devices across subnetworks using broadcast messages, enhancing visibility in Nozomi Networks environments.

Reference Guides
Additional reference guides.
- Alerts and Incidents
- Discovery Strategies
  - Discovery overview
    Discovery identifies previously undetected network devices. It sends protocol-specific broadcast messages to devices and examines the replies. The sensor repeats this process at predefined intervals transmitting diverse messages based on the devices.
  - Strategies
    - Strategies overview
      Discovery strategies are network-based methods that identify devices across subnetworks using broadcast messages, enhancing visibility in Nozomi Networks environments.
    - ARP
      Use this strategy to discover multi vendor devices in the network through ARP requests.
    - AutomationDirect CLICK KOP
      Use this strategy to discover AutomationDirect CLICK devices that expose the KOP protocol.
    - BACnet
      Use this strategy to discover devices that expose the BACnet protocol.
    - Beckhoff
      Use this strategy to discover Beckhoff devices that expose the ADS protocol.
    - Cognex
      Use this strategy to discover Cognex devices that expose the Cognex protocol.
    - SICK CoLa
      Use this strategy on SICK devices that implement the CoLa command language.
    - EtherNet/IP
      Use this strategy to discover multi vendor devices that expose the EtherNet/IP protocol, such as Rockwell Automation / Allen Bradley devices.
    - Tridium Niagara
      Use this strategy to discover Tridium devices that expose the FOX protocol.
    - Mitsubishi Electric MELSOFT
      Use this strategy to discover Mitsubishi Electric devices that expose the MELSOFT protocols, such as: GOT1000, GOT2000, Q-Series, iQ-R Series.
    - Moxa
      Use this strategy to discover Moxa devices that expose the Moxa Discovery protocol.
    - Onvif
      Use this strategy to discover multi vendor devices that expose the ONVIF protocol (mostly CCTV cameras).
    - Siemens STEP7/Profinet
      Use this strategy to discover Siemens devices that expose the Profinet protocol.
    - Sensor Net Connect
      Use this strategy to discover Sensor Net Connect IoT smart sensors that expose the Sensor Net Connect Discovery protocol.
    - Ubiquiti
      Use this strategy to discover Ubiquiti devices that expose the Ubiquiti Discovery protocol.
    - UPnP
      Use this strategy to discover multi vendor devices that expose the UPnP protocol.
- Smart Polling Strategies
- Federal Information Processing Standards

Strategies overview

Discovery strategies are network-based methods that identify devices across subnetworks using broadcast messages, enhancing visibility in Nozomi Networks environments.

Strategies

Discovery strategies use protocol-specific broadcast messages to identify devices connected to a network. These lightweight messages prompt devices to return identity information, which Nozomi Networks sensors collect and analyze. The process is repeated at defined intervals to maintain current visibility into the network.

Operation

Each Nozomi Networks sensor selects the appropriate network interfaces and sends out broadcast messages to the subnetworks it can access. On Arc, this process repeats every 5 minutes. On Guardian, the interval starts at 5 minutes and increases progressively, up to a maximum of 60 minutes.

The system listens for responses on the following user datagram protocol (UDP) ports:

UDP/48888 for most protocols
UDP/1911 for the Fox protocol
UDP/30718 for the SICK CoLa protocol
UDP/47808 for the BACnet protocol

Availability on Arc and Guardian

Most discovery strategies are supported on both Arc and Guardian platforms, although some are platform-specific. For each protocol, the guide specifies availability details to help with deployment planning.