SOLUTION
SCENARIO
With the explosion of unmanaged and managed IP-connected devices in the workplace, the manual method is no longer a reliable solution. The issues needed to be addressed effectively, including setting dynamic/static IP address and DHCP server, solving the problem of IP address tampering, conflict causing disconnection, and being allocated beyond control. A modern solution can help you gain the visibility across your network with comprehensive information, and accelerate the workflow of operation and management.
SOLUTION
UPAS IPAM can automatically identify device attributes, display IP/MAC information, centrally manage intranet connected devices, and provide complete IP usage records; combined with the allowlist mechanism, it completes the domain distribution settings with the existing DHCP to achieve the integration of the management system.
FEATURES
Synchronize management of IPv4 and IPv6
It can identify all devices connected to Intranet and sub-domain, automate adding device to allowlist in compliance with access policies, and support continuous IP monitoring and management of IPv4 and IPv6.
Automate allowlist management
The system enforce policy-based controls that enable you to automatically add conpliant devices to allowlist by assessing devises format of coputer name, type, OUI (the first six digits of MAC), and AD domain policy.
Unified DHCP configuration function
Multiple DHCP can be managed by the Console to reduce the cost of DHCP management and configuration. Through the establishment and removal of the device whitelist, the idle devices in the corporate network can be simultaneously viewed and the administrator can recover IP resources.
Real-time detection of the non-compliant DHCP server
To prevent IP issued by the unauthorized DHCP server from causing the environment device connection problem, the system is capable of real-time detection of non-compliant DHCP server in the network segment to ensure normal network hygiene.
Build-in allowlist management function
It can collect aggregate important information such as IP/MAC, computer name, and OS version of all connected devices, and add device to allowlist in compliance with security policies. The system also provides customize column such as basic information of employees, and comprehensive IP usage records gaining the visibility and controls of the intranet network.
Non-compliant behavior event warning notification
Against the issues of internal and external IP conflict, IP address tampering, MAC spoofing, non-compliant DHCP, or cross-VLAN unmanaged behavior, the system gives warnings and provides various report data (such as IP/MAC address of non-compliant device) to administrators. It helps administrators discover and response to the threat in a short time.
Control over IP usage and real-time configuration in your network
With IP usage record, administrators are able to compare IP address, user and point in time to receive a holistic understanding of the intranet and facilitate workflow. In addition, it also provides an IP configuration list showing all used and unassigned IP addresss, and assigned number in each network segment.
MODULES
ARPScanner
The UPAS NOC main module uses the patented ARP packet analysis technology, which can perform data collection, device identification and high-strength access control without installing Agent. The key functions are IP/MAC management, assets inventory, device access management (NAC, Network Access Control), and network blocking. Multiple bindings between IP / MAC / DHCP segment / computer name / hardware fingerprint (UUID) can be performed on all connected devices to achieve IP protection, IP reservation, IP invalidate, IP conflict prevention, and MAC impersonating. With the built-in reports, managers can manage intranet IP resources and devices in real-time.
IPv6 Management
The IPv6 module provides comprehensive IPv6 management. t can detect three types of IPv6 addresses, including unicast, multicast, and anycast, and perform compliance checks on IPv6 devices and block foreign devices that use IPv6. It also provides IPv6 real-time information, historical records, and an IPv4-mapped list.
