Network Assets
The Network Assets page is a dedicated inventory for the infrastructure that moves and protects your traffic — routers, switches, firewalls, access points, load balancers, and more. Each device is stored as a structured record with validated network fields, an owner, and a security posture, so your network layer is documented alongside the rest of your asset estate rather than living in a spreadsheet.
You can add and maintain devices by hand from the dashboard, and enrich their security context with Cert-IX scanner agents running on your internal networks. This page describes what the inventory stores, how to work with it, and how network devices connect to the platform's vulnerability and hardening capabilities.
Network Assets is part of Asset Management in the Cert-IX dashboard at app.cert-ix.com. For the full picture of how it fits alongside device, cloud, and software inventories, see the Asset Management overview.
Supported device types
When you register a network device you assign it a type. The type drives filtering, iconography, and how the device is grouped in your inventory. Cert-IX supports the following network device types:
| Category | Device types |
|---|---|
| Routing & switching | Router, Switch, Gateway, Network controller |
| Security & access | Firewall, IDS/IPS, VPN concentrator, Network TAP |
| Wireless & edge | Access point |
| Traffic handling | Load balancer, Proxy, WAN optimizer |
Type is a fixed field with a defined set of values — you pick from the list rather than typing free text — which keeps your inventory consistent and filterable.
What Cert-IX records for each device
Every network asset is a structured record. Alongside identity and location, the platform stores network addressing, lifecycle, and a security posture:
- Identity — name, type, manufacturer, and model
- Addressing — IP address, MAC address, subnet mask, gateway, and VLAN ID
- Placement — physical or logical location, network zone, and owner
- Hardware — serial number, port count, purchase date, and warranty expiry
- Operational state — status (Online, Offline, or Maintenance) and when the device was last seen
- Security posture — security status, risk level, firmware version, and whether encryption is enabled
- Organization — free-form notes and tags
Name, type, manufacturer, and model are required when you create a device. The remaining fields are optional and can be filled in over time as you enrich a record.
Adding network devices
Add a device manually
Use Add Device to open the device form and register a single asset. The form is grouped into Device Information (name, type, manufacturer, model) and Network Configuration (IP address, MAC address, and related addressing), so the most important fields are captured up front.
The addressing fields are strictly typed and validated — both in the browser and again on the server:
- IP address and gateway must be a valid IPv4 or IPv6 address, optionally with a CIDR prefix (for example
10.0.4.1or2001:db8::1/64). - MAC address must be a recognized format — colon- or hyphen-separated (
00:1A:2B:3C:4D:5E), Cisco dotted (001a.2b3c.4d5e), or bare 12-hex.
If a value doesn't match, the field is flagged before you can save and the request is rejected with a clear message rather than being stored as unparseable text. This keeps addressing data clean enough to search, filter, and correlate reliably.
Addressing fields are optional. Leave IP or MAC blank if you don't have it yet — validation only runs on values you actually enter, so a partially-known device is still worth recording.
Discover and assess with scanner agents
Manual entry is the primary way to register devices on this page, but you don't have to catalog a network by hand. Cert-IX scanner agents, deployed inside your environment, help you find and assess network infrastructure:
- Bitmapper maps network topology, giving you a picture of the devices and connections on a segment.
- Bitscanner performs vulnerability scanning against reachable devices and correlates findings to CVEs.
- Bitenforcer checks device configurations against hardening baselines (CIS, STIG, PCI-DSS).
Agents are downloaded from downloads.cert-ix.com and paired to your workspace with your Tenant ID (found under Settings → Organization). See the Scanner Agents overview and the agent deployment guide to get started.
Working with your inventory
Search and filter
The inventory lists your devices in a paginated table. A search box matches on name, IP address, location, and manufacturer, and quick filters let you narrow by type (for example, only firewalls) and status (Online / Offline / Maintenance). Filters combine, so you can quickly answer questions like "which firewalls are currently offline?"
View, edit, and remove devices
Selecting a device opens a detail view grouped into device information, location & status, and security status. From there you can:
- Edit any field and save changes back to the record.
- Delete a single device after a confirmation prompt.
- Bulk-delete multiple devices in one action when you're decommissioning a segment.
Create, update, and delete actions are idempotent — an accidental double-click won't create duplicates or repeat a deletion.
Export to CSV
Export downloads the devices currently in view — respecting any active search and filters — as a CSV file. The export includes core identity, addressing, status, and security columns, and is generated safely (values are quoted and neutralized against spreadsheet formula injection) so it opens cleanly in any spreadsheet tool.
Security posture for network devices
Network devices aren't just inventoried — they carry a security posture that reflects what the platform knows about them.
Vulnerability findings
Where scanner agents assess your network, vulnerabilities discovered on a device are surfaced through Cert-IX Vulnerability Management, which ranks findings by severity — Critical, High, Medium, Low — and provides remediation guidance. Each device record reflects this in its security status and risk level, and tracks the installed firmware version so you can see which devices are running outdated code.
For the full workflow — how findings are prioritized and remediated — see Vulnerability Management.
Configuration baselines
The Bitenforcer agent evaluates device configurations against recognized hardening baselines including CIS Benchmarks, STIG, and PCI-DSS, helping you spot weak configurations such as insecure management access or missing controls. Baseline results feed the broader Compliance view.
Status and last-seen
Each device records an operational status (Online, Offline, or Maintenance) and a last-seen timestamp, giving you a quick read on availability across your network estate directly from the inventory.
Access control and auditing
Network asset operations run through the platform's standard security controls. Actions are permission-checked against your role (RBAC), so users only modify what they're authorized to. Writes are attributed to their source — a change made in the dashboard is distinguished from one proposed by the Bobby assistant — and are recorded for accountability.
Scanner-agent coverage and the depth of automated network assessment are expanding. Availability of specific agents and assessment features can depend on your plan and on which agents you've deployed. If a capability isn't visible in your workspace yet, it may be rolling out or gated to a higher plan.
Learn more
- Asset Management overview — how network, device, cloud, and software inventories fit together
- Scanner Agents — Bitmapper, Bitscanner, and Bitenforcer for internal-network discovery and assessment
- Vulnerability Management — how findings are prioritized and remediated
- Devices — the endpoint and server inventory that complements your network layer
War diese Seite hilfreich?