Home
Guardian
Learn how Guardian provides comprehensive asset inventory and network visibility for OT and IoT environments.
User Guide
Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
Network
The Network page gives you access to multiple pages that show nodes, links, sessions in tabular format and graphs and traffic in a graphical format.
Nodes
The Nodes page lets you view all the network nodes in your environment and perform actions on them.
Manage learning for a node
The Nodes page lets you manage the learning for a selected node.

Guardian
Learn how Guardian provides comprehensive asset inventory and network visibility for OT and IoT environments.
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
  - Sensors
    The Sensors page lets you view all of the sensors that you have in your system.
  - Alerts
    The Alerts page shows all the latest alerts in the system. It lets you view the alerts in different modes, and carry out actions on the alerts.
  - Assets
    The Assets page shows all the physical components and systems in the local network environment and their associated details. It also lets you perform actions on those assets. Depending on the nodes and components involved, assets can range from a simple personal computer to an operational technology (OT) device.
  - Queries
    You can use the Nozomi Networks Query Language (N2QL) syntax to create complex data processes to obtain, filter, and analyze lists of information from the Nozomi Networks software.
  - Smart Polling in Guardian
    The Smart Polling page lets you view and manage Smart Polling.
  - Arc in Guardian
    Arc™ is a host-based sensor that detects and defends against malicious or compromised endpoints, and insider attacks. You can use Arc sensors to aggregate data for analysis and reports, either on-premises, or in the Vantage cloud.
  - Network
    The Network page gives you access to multiple pages that show nodes, links, sessions in tabular format and graphs and traffic in a graphical format.
    - Nodes
      The Nodes page lets you view all the network nodes in your environment and perform actions on them.
      - Configure a node
        The Nodes page lets you configure nodes.
      - Show alerts for a node
        The Nodes page lets you show alerts for a selected node.
      - Show requested traces for a node
        The Nodes page lets you show requested traces for a selected node.
      - Request a trace for a node
        The Nodes page lets you request a trace for a selected node.
      - Manage learning for a node
        The Nodes page lets you manage the learning for a selected node.
      - Navigate from a node
        The Nodes page lets you navigate to related entities from a selected node.
      - Add a node to a Smart Polling plan
        The Nodes page lets you add a node to an existing Smart Polling plan.
    - Links
      The Links page shows all the links in your environment.
    - Sessions
      A session is established at a certain point in time, and later turned down. An established communication session might involve more than one message in each direction.
    - Graph
      The Graph pages gives a graphical representation of the nodes in the environment.
    - Traffic
      The Traffic page shows charts with information about throughput, protocols, and open transmission control protocol (TCP) connections.
    - Graph controls
      A list of the different control options in the graph view.
  - Process
    Process is a set of repeatable functions that a business does to deliver a core value.
  - Reports
    The Reports page lets you manage, generate, schedule and view reports.
  - Assertions
    The Assertions page shows all the assertions and lets you configure them.
  - Time machine
    Time machine lets you load a snapshot, which is a previously saved state, and go back in time, to analyze the data from a past situation. You can load a single snapshot and use the platform as usual or load two snapshots and compare the user interface to highlight changes.
  - Vulnerabilities
    The Nozomi Networks software continuously discovers vulnerabilities in monitored assets.
  - Administration
  - Personal settings
    The personal settings page lets you do actions that are specific to your profile.
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Manage learning for a node

The Nodes page lets you manage the learning for a selected node.

About this task

The Manage Learning dialog lets you learn and delete the entire node and its individual details, such as internet protocol (IP) or media access control (MAC) address.

Note:

The icon adjacent to the node shows its status. When the node details are:

A green icon shows when the node details have been entirely learned
An orange icon shows when the node details are only partially learned
A red icon shows when the node details have not been learned

Individual details have either a green or red icon, depending on whether they are learned or not. When you learn, or delete a node, all of its details are affected in the same way. When you learn, or delete, an individual detail, only that detail's learning status changes.

Procedure

In the top navigation bar, select icon > Network.
The Network page opens.
Select Nodes.
The Nodes page opens.
To the left of the applicable node, select the icon.
A dialog shows.
Optional: Select an item(s) to delete.
- To delete the IP address, select the checkbox to the left.
- To delete the MAC address, select the checkbox to the left.
- To delete the node, and both the IP and MAC addresses, select the checkbox to the left.
1. Select Delete to delete the selected item(s).
Optional: Select an item(s) to learn.
- To learn the IP address, select the checkbox to the left.
- To learn the MAC address, select the checkbox to the left.
- To learn the node, and both the IP and MAC addresses, select the checkbox to the left.
1. Select Learn to learn the selected item(s).
Select Save.