General

The General page lets you configure the behavior of a sensor.

Figure 1. General page

General page showing the IPv6 checkbox, Alert dediplication dropdown, and Smart Polling features

IPv6

This checkbox enables the creation of assets with an Internet Protocol version 6 address that are detected through passive monitoring.

Alert deduplication

This control lets you turn the deduplication of alerts on or off. When deduplication is enabled, Guardian groups identical events into a single alert instead of creating individual alerts for each event. This simplifies alert management and provides better visibility of anomalies.

By default, this feature is turned off. The default will change to enabled in Nozomi Networks Operating System (N2OS) v26.5.0. Leaving the status set to Default will result in the feature being turned on automatically when N2OS v26.5.0 is installed.

Validate certificates

By default, Smart Polling does not check that the secure sockets layer (SSL)/transport layer security (TLS) certificate is valid when connecting to an hypertext transfer protocol secure (HTTPS) server, nor does it verify that the host key of an secure shell (SSH) server is known. You can enable these security checks here.

Smart Polling uses the internet protocol (IP) address to contact HTTPS servers. For certificate verification to succeed, the certificate must contain the server's IP address among the valid names.

For SSH, the host key is compared against the content of the ssh/host_key property of the polled node.

Use legacy WMI strategy implementation

If you find issues with your WMI Smart Polling plans that did not occur before, reverting to the legacy implementation of this strategy may resolve them. Contact technical support if this is the case.

Use legacy WinRM strategy implementation

If you find issues with your Windows Remote Management (WinRM) Smart Polling plans that did not occur before, reverting to the legacy implementation of this strategy may resolve them. Contact technical support if this is the case.

Use legacy SSH strategy implementation

If you find issues with your SSH Smart Polling plans that did not occur before, reverting to the legacy implementation of this strategy may resolve them. Contact technical support if this is the case.

Note:
The legacy implementation will not verify the SSH host key even if Validate certificates is turned on.