If I launched a scan from my PC I would miss entire sections of my network, it's segmented for security purposes, as most networks are. etc.ĭigging through the configs will be unavoidable, to ensure that you actually get a whole picture. I want to sit at my PC - not consoled into a switch (Aruba, Cisco or any other product) and start a discovery process that does out across my wan and says : These are your switches (IP address), This is the gateway for this subnet, this is where DHCP is being served up. There's nothing worse than going through all the effort to create good documentation and then letting it age. Once you've performed this discovery, you'll have to create processes to maintain it. This can be tedious, but not as tedious as finding problem devices during an incident. Once you complete the discovery, you'll have to create the documentation yourself. You can also use NMAP for this, but AIPS is a much simpler GUI for basic discovery.Īfter all this, I'd want to verify by walking around and making sure nothing was missed. You'll also have to feed it all of the subnets in order to do a proper discovery. You'll get a list of devices that respond to a ping sweep. Outside of that, you can start with something like Advanced IP Scanner which is free, but that's going to give you limited information on the devices.

once you've deployed agents to your endpoints. We are using Connectwise Automate which can discover network devices such as routers, 元 switches (even some L2 switches), printers, etc. You are not really looking for network mapping, you're looking for asset discovery which is difficult to do if your organization has ANY kind of network security, even simply at the asset level. Unfortunately what you want won't be 100% free.

Lansweeper for mac