NNM includes analysis modules that analyze network traffic based on certain criteria. These modules modularize NNM detection capabilities and provide users the ability to enable or disable them. There are two analysis modules:
- SCADA/ICS Analysis Module
Note: This module is only available for Industrial Security customers.
This module analyzes SCADA network traffic to discover SCADA assets and their vulnerabilities. In addition, the module provides deep visibility into the type of SCADA devices discovered. This module is enabled by default and can be disabled in environments that do not contain SCADA devices. You can use the Tenable Search page to search for specific device detection information. This module is only available for Industrial Security customers.
Connection Analysis Module
This module reports connection duration and bandwidth information including for IPv6 and tunneled traffic. This module is disabled by default.
Note: You must restart NNM after enabling a module for the module to function correctly within NNM.