Home
Guardian
Learn how Guardian provides comprehensive asset inventory and network visibility for OT and IoT environments.
User Guide
Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
Graph
The Graph pages gives a graphical representation of the nodes in the environment.
Assets
The Assets page shows linked assets as graph vertices when available, and defaults to node display when no asset is associated. This view provides a contextual representation of asset relationships within the network topology.

Guardian
Learn how Guardian provides comprehensive asset inventory and network visibility for OT and IoT environments.
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
  - Sensors
    The Sensors page lets you view all of the sensors that you have in your system.
  - Alerts
    The Alerts page shows all the latest alerts in the system. It lets you view the alerts in different modes, and carry out actions on the alerts.
  - Assets
    The Assets page shows all the physical components and systems in the local network environment and their associated details. It also lets you perform actions on those assets. Depending on the nodes and components involved, assets can range from a simple personal computer to an operational technology (OT) device.
  - Queries
    You can use the Nozomi Networks Query Language (N2QL) syntax to create complex data processes to obtain, filter, and analyze lists of information from the Nozomi Networks software.
  - Smart Polling in Guardian
    The Smart Polling page lets you view and manage Smart Polling.
  - Arc in Guardian
    Arc™ is a host-based sensor that detects and defends against malicious or compromised endpoints, and insider attacks. You can use Arc sensors to aggregate data for analysis and reports, either on-premises, or in the Vantage cloud.
  - Network
    The Network page gives you access to multiple pages that show nodes, links, sessions in tabular format and graphs and traffic in a graphical format.
  - Graph
    The Graph pages gives a graphical representation of the nodes in the environment.
    - Network
      The Network page displays a live graph of connected assets, links, and filters in your network. You can apply filters, adjust the layout, and select node and link perspectives. Interactive options let you customize the visualization and export reports.
    - Assets
      The Assets page shows linked assets as graph vertices when available, and defaults to node display when no asset is associated. This view provides a contextual representation of asset relationships within the network topology.
    - Physical
      The Physical page displays a real-time interactive map of all physical device connections in the network. Nodes are shown only if a physical link has been detected for them. The graph, shows how devices connect at the cable level. It is a live, visual way to understand your physical network layout down to the port.
    - Graph controls
      A list of the different control options in the graph view.
  - Process
    Process is a set of repeatable functions that a business does to deliver a core value.
  - Reports
    The Reports page lets you manage, generate, schedule and view reports.
  - Assertions
    The Assertions page shows all the assertions and lets you configure them.
  - Time machine
    Time machine lets you load a snapshot, which is a previously saved state, and go back in time, to analyze the data from a past situation. You can load a single snapshot and use the platform as usual or load two snapshots and compare the user interface to highlight changes.
  - Vulnerabilities
    The Nozomi Networks software continuously discovers vulnerabilities in monitored assets.
  - Administration
  - Personal settings
    The personal settings page lets you do actions that are specific to your profile.
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Assets

The Assets page shows linked assets as graph vertices when available, and defaults to node display when no asset is associated. This view provides a contextual representation of asset relationships within the network topology.

Graph view of linked asset nodes in a network topology, showing connected clusters with central hub nodes and multiple branching edges — Figure 1. Assets page

Overview

The asset graph groups nodes by asset when possible, unlike the standard network graph. For example, if an asset includes two nodes, the network graph displays two separate icons, one for each node, while the asset graph displays a single icon that represents the asset.

In the case that a node does not belong to an asset then the asset graph shows the node itself.

Generate PDF report

The generate PDF icon lets you create a portable document format (PDF) report of the selected item, which will show in the Reports page when it is ready.

Filters

This indicates active graph filtering, when present. Filters can be from the filter bar (see R and S below), or activated from the zone/topology graph when you select a link/node in the zone/topology graphs. Once a filter is enabled with a value, the graph is automatically updated. If more than one filter is enabled, then a logical and criteria is applied. Only nodes that satisfy all of the specified filters are shown.

Note:

If a node passes the filters, then all of the directly connected nodes are shown in the graph. For example if a specific internet protocol (IP) filter is used, then the specified node is shown along with all the nodes connected to it.

Reset

This resets customizations and reloads the data.

Live / refresh

The Live icon lets you change live view on, or off. When live mode is on, the page will refresh approximately every five seconds.

Time

These icons let you select an activity time range.

For more details, Magic wand.

Nodes

This dropdown lets you select node visualization configuration options.

Links

This dropdown lets you configure visualization options.

Layout

This dropdown lets you select a layout for the graph. For more details, see Layout.

Play-pause

The play-pause icon lets you pause, or restart the motion of the graph.

Increase-Decrease icon size

The increase and decrease icons lets you change the size of the icons in the graph.