Home
Guardian
Learn how Guardian provides comprehensive asset inventory and network visibility for OT and IoT environments.
User Guide
Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
Assets
The Assets page shows all the physical components and systems in the local network environment and their associated details. It also lets you perform actions on those assets. Depending on the nodes and components involved, assets can range from a simple personal computer to an operational technology (OT) device.
Details window
The details window lets you view more detailed information for an assets.

Guardian
Learn how Guardian provides comprehensive asset inventory and network visibility for OT and IoT environments.
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
  - Sensors
    The Sensors page lets you view all of the sensors that you have in your system.
  - Alerts
    The Alerts page shows all the latest alerts in the system. It lets you view the alerts in different modes, and carry out actions on the alerts.
  - Assets
    The Assets page shows all the physical components and systems in the local network environment and their associated details. It also lets you perform actions on those assets. Depending on the nodes and components involved, assets can range from a simple personal computer to an operational technology (OT) device.
    - List
      The List page shows all the assets in table format.
    - Diagram
      The Diagram page uses the Purdue model format to display the assets. Assets are shown in separate rows, according to their level.
    - Details window
      The details window lets you view more detailed information for an assets.
    - Configure an asset
      The Lists page lets you configure assets.
    - Generate a PDF report of an asset
      The Lists page lets you generate a report in portable document format (PDF).
    - Navigate from an asset
      The Lists page lets you use hyperlinks to navigate to entities that are related to an asset.
    - View more details for an asset
      Both the Lists and Diagrams pages lets you view more details for a specific asset.
    - Overview
      The Overview page shows a general overview of information for items such as network statistics and location, protocols, and learning status for the related assets.
    - Sessions
      The Sessions page shows detailed information for communication sessions between devices.
    - Alerts
      The Alerts page shows detailed information for all the alerts that have been raised for the related assets.
    - Software
      The Software page shows a list of software applications that are installed on the related assets.
    - Installed hotfixes
      The Installed hotfixes page shows a list of hotfixes that are installed on the related assets.
    - Missing hotfixes
      The Missing hotfixes page shows a list of hotfixes that could be installed on the related assets to resolve the related vulnerabilities.
    - Vulnerabilities
      The Vulnerabilities page shows a list of vulnerabilities that are present on the related asset.
    - Variables
      The Variables page shows detailed information for the variables hosted by the related asset.
  - Queries
    You can use the Nozomi Networks Query Language (N2QL) syntax to create complex data processes to obtain, filter, and analyze lists of information from the Nozomi Networks software.
  - Smart Polling in Guardian
    The Smart Polling page lets you view and manage Smart Polling.
  - Arc in Guardian
    Arc™ is a host-based sensor that detects and defends against malicious or compromised endpoints, and insider attacks. You can use Arc sensors to aggregate data for analysis and reports, either on-premises, or in the Vantage cloud.
  - Network
    The Network page gives you access to multiple pages that show nodes, links, sessions in tabular format and graphs and traffic in a graphical format.
  - Process
    Process is a set of repeatable functions that a business does to deliver a core value.
  - Reports
    The Reports page lets you manage, generate, schedule and view reports.
  - Assertions
    The Assertions page shows all the assertions and lets you configure them.
  - Time machine
    Time machine lets you load a snapshot, which is a previously saved state, and go back in time, to analyze the data from a past situation. You can load a single snapshot and use the platform as usual or load two snapshots and compare the user interface to highlight changes.
  - Vulnerabilities
    The Nozomi Networks software continuously discovers vulnerabilities in monitored assets.
  - Administration
  - Personal settings
    The personal settings page lets you do actions that are specific to your profile.
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Details window

The details window lets you view more detailed information for an assets.

Asset details window — Figure 1. Asset details window

This details window shows more details for an asset.

The top section of the screen contains generic data. You can hover your mouse over the information

icon to display the source, granularity and confidence of the corresponding piece of data. Data includes:

internet protocol (IP) (address)
Roles
Vendor
media access control (MAC) address
MAC vendor

The details window has these tabs:

Information icon

When you hover over the

icon, you can see information for:

Source
Granularity
Confidence

Source

Information source	Description
manual	Information that is manually added from the configuration
imported data	Imported information
passive detection	Information from deep packet inspection
asset-kb	Information from Asset Intelligence
smart-polling	Information from Smart Polling

Granularity

Level of detailed information	Description
manual-or-import	Information manually added or imported
complete	Detailed information that has been extracted
partial	Detailed, but not complete information
generic	A family/generic value is found, but it is not detailed
unknown	Unknown

Confidence

Level of confidence in information	Description
manual-or-import	Information manually added or imported, with the highest level of confidence at this level
high	High level of confidence
good	Good level of confidence
low	Low level of confidence
unknown	Unknown confidence