Device Inventory

The Network Insights > Device Inventory page displays the discovered devices.

The Device Inventory monitor displays the following information:

Column	Description
Last Seen	The date and time the device was last seen.
Latest Connection Time	The date and time of latest connection.
Address	The device IP address
Device Identifier	The device identifier.
Status	The connection status (Online of Offline). If FortiNDR does not see a session from a device within 60 seconds, the status will be Offline.
Category	The device category (Unknown, Home & Office, Mobile and Network).
Sub Category	The device sub category (Unknown, IP Phone, Computer, Phone, or Firewall)
OS	The device operating system.
Confidence	The confidence level.
Country	The device country if known.
Device ID	The device ID.
Latest Device Enrichment	The timestamp for the latest device enrichment. SeeDevice Enrichment
Model	The device model.
Vendor	The device vendor.

Click the Download button next to the Search field. A pop-up window with download status opens.

Double-click a record in the table to open the Device Information pane. The following information is displayed:

General	Device ID Device Name Status Discovery Time Last Seen
Hardware	Model Operating System Category Sub Category Vendor Confidence
Network	Most Recent IP Internal/External Mac Address Country

Device details

Select a record in the table and click View Device Detail next to the Search field. The Device Details pate is organized into two tabs:

Information	Displays information about the device and anomalies. You can use this tab to update the device identifier, set the time range, and view related sessions and anomalies.
Malware Host Story	Displays information about the malware such as the Risk Level, Scenario Type and Malware Family.

The Network Insights > Device Inventory page displays the discovered devices.

The Device Inventory monitor displays the following information:

Column	Description
Last Seen	The date and time the device was last seen.
Latest Connection Time	The date and time of latest connection.
Address	The device IP address
Device Identifier	The device identifier.
Status	The connection status (Online of Offline). If FortiNDR does not see a session from a device within 60 seconds, the status will be Offline.
Category	The device category (Unknown, Home & Office, Mobile and Network).
Sub Category	The device sub category (Unknown, IP Phone, Computer, Phone, or Firewall)
OS	The device operating system.
Confidence	The confidence level.
Country	The device country if known.
Device ID	The device ID.
Latest Device Enrichment	The timestamp for the latest device enrichment. SeeDevice Enrichment
Model	The device model.
Vendor	The device vendor.

Click the Download button next to the Search field. A pop-up window with download status opens.

Double-click a record in the table to open the Device Information pane. The following information is displayed:

General	Device ID Device Name Status Discovery Time Last Seen
Hardware	Model Operating System Category Sub Category Vendor Confidence
Network	Most Recent IP Internal/External Mac Address Country

Select a record in the table and click View Device Detail next to the Search field. The Device Details pate is organized into two tabs:

Information	Displays information about the device and anomalies. You can use this tab to update the device identifier, set the time range, and view related sessions and anomalies.
Malware Host Story	Displays information about the malware such as the Risk Level, Scenario Type and Malware Family.