Automatic Asset Joining With Netsec

^{Last Updated: 2023-12-04}

Purpose

This article describes the ways assets are automatically joined in the Portal.

Introduction

In Outpost24 Portal, assets are constructs made up of identifiers like IPs, hostnames, MAC addresses, or cloud region/tenant IDs. The Automatic Asset Joining feature uses a micro service that evaluates identifiers found during scans against existing assets using matching heuristics. When identifiers align with enough confidence, they merge into a single asset, preventing duplicates. If no match is found, a new asset is created. This improves inventory accuracy, ensures consistency across multiple scans, and helps maintain a clean view of your environment.

Automatic Asset Joining

Assets are constructed using a micro service that through different heuristics evaluate the matching between the asset identifiers found during a scan with the already existing assets in the database.

There are several different types of identifiers such as:

• IP

• Hostname

• MAC

• AWS_REGION

• MAZ_TENANT_ID

If multiple matches are found, the one with the highest score will be selected. If the service determines that none match ?enough? a new asset is established instead.

Assets related to SWAT, Snapshot, and Assure subscriptions will never be joined with assets constructed by the other products.