Offers fast and easy identification of new endpoints and changes, ensuring security professionals “know their site networks.”
Colorado Springs, Colorado, USA – November 13, 2023 – Today, NetAlly announced the availability of the latest software updates for its line of wired and wireless network analyzers. Version 2.4 includes new functionality for its EtherScope® nXG, LinkRunner® 10G, AirCheck® G3 Pro, and most notably, a new Discovery Monitoring capability for the CyberScope® Handheld Cybersecurity Analyzer.
In April this year, NetAlly introduced CyberScope, the world’s first handheld analyzer for in-depth site cybersecurity assessments. With today’s announcement, NetAlly amplifies the power of CyberScope’s discovery capabilities with new capabilities in their Link-Live collaboration, reporting, and analysis platform, providing fast insight into all devices in a site network over time.
“With the massive proliferation of endpoints and ubiquitous connectivity in the access layer, security professionals need a fast and easy way to have ‘eyes on’ all of the devices at the sites they manage,” says James Kahkoska, NetAlly CTO.
The Discovery Monitoring feature allows automated daily, weekly, or monthly snapshots to be uploaded to Link-Live (or collected manually as desired) to track new and missing devices or Wi-Fi access points and clients. Powerful filtering and grouping allow analysis to instantly identify new devices, changes within a device, or for tracking specific devices and types over time.
“It’s critical that SecOps teams know which devices are on the network at any one time and be able to identify new devices on-net, as well as all Wi-Fi networks and endpoints,” continues Kahkoska. “Every engineer wants to ‘know their network’ but the complexity and scope makes that difficult if not impossible. With Discovery Monitoring, you are able to configure your CyberScope to automatically capture and upload multiple Discovery and Wi-Fi snapshots making it easier than before to detect new, missing, or transitory devices on the network.”
After the Discovery and Wi-Fi analysis data is pushed to Link-Live*, the user selects the desired snapshots in the Analysis tab. 
The earliest analysis file becomes the initial point of reference or baseline, with each subsequent snapshot compared to the previous snapshot.
Results can be grouped by device, device types, problems, and last seen. For Wi-Fi, grouping on SSID, BSSID, channels, and 802.11 type provides fast insight into Wi-Fi clients; grouping on security instantly shows which encryption type is being used by each Wi-Fi client.
In addition to grouping, detailed filtering narrows the scope of the data; for example, filtering to “New” shows only newly discovered devices since a prior snapshot. The free string match filter allows the use of any text variable, such as the manufacturer or device names; i.e., filtering on “raspberry” (or just “rasp”) will show any discovered Raspberry Pi on your network, be they wired or Wireless.
Results are flagged as “New”, “Missing”, or “Change within device” (to indicate device configuration changes such as channel, IP address, nearest switch, etc.)
Column ordering and formatting are saved as your preference and can also be saved to your Link-Live organization to be shared with others.
In addition to the extensive CyberScope enhancements in monitoring and Nmap depth, the EtherScope nXG, LinkRunner 10G, and AirCheck G3 also receive valuable new features:
| Feature | CyberScope | EtherScope | AirCheck G3 | LinkRunner 10G |
|---|---|---|---|---|
| Discovery Monitoring | • | |||
| Enhanced result grading in Nmap app | • | |||
| Run multiple Nmap tests per device in Discovery | • | |||
| Reverse grading in AutoTest | • | • | • | • |
| Spectrum app improvements | • | • | • | |
| DHCP options testing | • | • | • | • |
| Passpoint beacon parsing | • | • | • | |
| Reverse Grading in AutoTest | • | • | • | • |
| Auto-Push Connection Logs to Link-Live | • | • | • | • |
For additional information, please refer to the release notes for each specific product.
*Link-Live is available as a free, highly secure cloud service or the Link-Live Private edition for licensed on-prem or private cloud deployment.
