You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-iot/organizations/how-to-work-with-the-sensor-device-map.md
+8-9Lines changed: 8 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -173,9 +173,6 @@ For example, you might receive a notification about an inactive device that need
173
173
- Handle one notification at a time, selecting a specific mitigation action, or selecting **Dismiss** to close the notification with no activity.
174
174
- Select **Select All** to show which notifications can be [handled together](#handling-multiple-notifications-together). Clear selections for specific notifications, and then select **Accept All** or **Dismiss All** to handle any remaining selected notifications together.
175
175
176
-
> [!NOTE]
177
-
> Selected notifications are automatically resolved if they aren't dismissed or otherwise handled within 14 days. For more information, see the action indicated in the **Auto-resolve** column in the table [below](#device-notification-responses).
178
-
>
179
176
180
177
### Handling multiple notifications together
181
178
@@ -192,13 +189,15 @@ When you handle multiple notifications together, you may still have remaining no
192
189
193
190
The following table lists available responses for each notification, and when we recommend using each one:
194
191
195
-
| Type | Description | Available responses | Auto-resolve|
196
-
|--|--|--|--|
197
-
|**New IP detected**| A new IP address is associated with the device. This may occur in the following scenarios: <br><br>- A new or additional IP address was associated with a device already detected, with an existing MAC address.<br><br> - A new IP address was detected for a device that's using a NetBIOS name. <br /><br /> - An IP address was detected as the management interface for a device associated with a MAC address. <br /><br /> - A new IP address was detected for a device that's using a virtual IP address. | - **Set Additional IP to Device**: Merge the devices <br />- **Replace Existing IP**: Replaces any existing IP address with the new address <br /> - **Dismiss**: Remove the notification. |**Dismiss**|
198
-
|**No subnets configured**| No subnets are currently configured in your network. <br /><br /> We recommend configuring subnets for the ability to differentiate between OT and IT devices on the map. | - **Open Subnets Configuration** and [configure subnets](how-to-control-what-traffic-is-monitored.md#configure-subnets). <br />- **Dismiss**: Remove the notification. |**Dismiss**|
192
+
| Type | Description | Available responses |
193
+
|--|--|--|
194
+
|**New IP detected**| A new IP address is associated with the device. This may occur in the following scenarios: <br><br>- A new or additional IP address was associated with a device already detected, with an existing MAC address.<br><br> - A new IP address was detected for a device that's using a NetBIOS name. <br /><br /> - An IP address was detected as the management interface for a device associated with a MAC address. <br /><br /> - A new IP address was detected for a device that's using a virtual IP address. | - **Set Additional IP to Device**: Merge the devices <br />- **Replace Existing IP**: Replaces any existing IP address with the new address <br /> - **Dismiss**: Remove the notification. |
195
+
|**Inactive devices**| Traffic wasn't detected on a device for more than 60 days. | - **Delete**: If the device isn't part of your network, remove it from the device inventory. <br><br> - **Dismiss**: Remove the notification if the device is part of your network. If the device is inactive, for example, because it's incorrectly disconnected from the network, dismiss the notification and reconnect the device. |
196
+
|**New OT devices**| An OT device was detected on a subnet that's not defined as an ICS subnet. | - **Set as ICS Subnet** <br><br> - **Dismiss**: Remove the notification if the device is part of your subnet. |
197
+
|**No subnets configured**| No subnets are currently configured in your network. <br /><br /> We recommend configuring subnets for the ability to differentiate between OT and IT devices on the map. | - **Open Subnets Configuration** and [configure subnets](how-to-control-what-traffic-is-monitored.md#configure-subnets). <br />- **Dismiss**: Remove the notification. |
199
198
|**Operating system changes**| One or more new operating systems have been associated with the device. | - Select the name of the new OS that you want to associate with the device.<br /> - **Dismiss**: Remove the notification. |No automatic handling|
200
-
|**New subnets**| New subnets were discovered. |- **Learn**: Automatically add the subnet.<br />- **Open Subnet Configuration**: Add all missing subnet information.<br />- **Dismiss**<br />Remove the notification. |**Dismiss**|
201
-
|**Device type changes**| A new device type has been associated with the device. | - **Set as {…}**: Associate the new type with the device.<br />- **Dismiss**: Remove the notification. |No automatic handling|
199
+
|**New subnets**| New subnets were discovered. |- **Learn**: Automatically add the subnet.<br />- **Open Subnet Configuration**: Add all missing subnet information.<br />- **Dismiss**<br />Remove the notification. |
200
+
|**Device type changes**| A new device type has been associated with the device. | - **Set as {…}**: Associate the new type with the device.<br />- **Dismiss**: Remove the notification. |
0 commit comments