Network Discovery

See the network from multiple vantage points.Reconstruct the infrastructure over time.

Each Argus Client observes its part of the network. Argus preserves and correlates the evidence to build a readable, historical and exportable company-wide view.

Explore the scan Request a demo

Company · consolidated scans5 sources

WS-OPS-008Source endpoint

Gateway192.168.10.1

SRV-DATA-001443 · 445

NAS-ARCH-01storico · 445

Internetdefault route

Last consolidation · 09:42

01 Client02 Host03 Company04 Export

Argus Client as an observation point

A scan turns the visible network into understandable data.

Argus Client collects interfaces, local networks, gateways, DNS, routes, ARP cache, reached hosts, ports and services. Every result retains its date, origin, mode and duration so technicians always know when and from where the network was observed.

01Context

Execution time, origin and scan depth.

02Scope

Interfaces, networks, routes, gateways and DNS visible to the endpoint.

03Evidence

Hosts, addresses, ports, services and detection method.

Endpoint scan

Start with the operational picture.

The header summarizes what is needed to interpret the result correctly: when the scan was executed and received, whether it was scheduled, the mode used, host count and duration.

Filters quickly separate servers, workstations, network devices, NAS systems and devices that are not yet classified.
The map and list are two views of the same acquisition.
Previous scans remain available for historical comparison.

Overview of a Network Discovery scan run from endpoint WS-OPS-008 — The scan keeps network context, summary and representation together.

Hierarchical map of the network observed from endpoint WS-OPS-008 — The path starts from the endpoint, crosses visible networks and reaches detected assets.

Visible relationships

Understand which network reveals each device.

The hierarchical view organizes results by origin. Argus Client is the starting point, observed networks form the second level and hosts appear with their address and classification.

This distinguishes directly connected devices from those reached through known routes and makes investigation paths immediately visible.

The same evidence, a new perspective

A radial view for seeing concentrations and anomalies.

The radial layout places the selected network at the center and distributes detected elements around it. It is particularly useful for comparing host density at a glance or isolating a segment.

Lines represent connection evidence.They are not an automatic statement of physical cabling: routes, caches, probes and endpoint visibility all contribute to the reconstruction.

Radial view of hosts detected in the selected network — The same scan can be explored with a layout suited to visual analysis.

Company-wide consolidated view

Every endpoint adds a piece. Argus reconstructs the whole.

The Monitor consolidates scans from selected endpoints and combines compatible observations without losing provenance. The company gains a cross-environment map of networks, sites, hosts and services built from multiple observation points.

01Multiple sources

Endpoint acquisitions cover different segments and paths.

02Correlated identities

Compatible evidence is linked to the same asset while conflicts remain visible.

03Preserved history

First and last observations help interpret infrastructure evolution.

Consolidated company map built from scans by multiple endpoints — Networks observed by different sources coexist in the same operational map.

Device details in the company Network Discovery map — The side panel brings together identity, network, services, confidence and the endpoint that detected the asset.

From the map to data

Interfaces and hosts become a searchable inventory.

The table complements the graphical representation with consolidated technical data: interface, address, MAC, gateway, DNS, detection sources, ports and status.

EsportazioneCSV ed Excel

Data can be exported for documentation, periodic checks and analysis with external tools.

Elenco di interfacce e host consolidati da Network Discovery — The data view supports detailed verification and export from the Monitor when needed.

Statuses with precise meaning

“Detected” does not necessarily mean “online”.

Argus describes available evidence without turning it into artificial certainty. Statuses distinguish a current presence from historical evidence or an identity that still requires verification.

Present

Latest scan

The host appears in the completed acquisition of at least one selected source.

Historical

Previous observation

The host appears in previous scans still included in the analyzed period.

ARP cache only

Passive indication

The observation contains no active confirmation or sufficient open-port evidence.

Ambiguity

Identity to verify

The evidence is not yet sufficient for a unique, reliable correlation.

Correct interpretation

Network Discovery observes the network. It does not modify devices.

Argus Client runs probes and collects evidence according to the selected depth. Firewalls, segmentation, routes and permissions affect what can be seen.

Reading the map does not start a new scan.The Monitor explores completed acquisitions and saved consolidations while keeping observation and action separate.