Network Topology Explorer (BETA)

Overview

The Network Topology Explorer gives you a live, visual map of how devices in a customer environment connect to each other: subnets, gateways, switch ports, VLANs, and routed paths. Instead of manually cross-referencing device records to work out which device sits behind which gateway, you can trace connectivity on one interactive map.

The map is built entirely from data your inspectors already collect, so there is no new integration, agent, or license to deploy. It sits at the top of the Asset Inventory Devices view and links directly back into the Devices table.

---

Feature Highlights

• Subnet-First Overview
  You can view every subnet as a bubble sized by device count. Devices are not fetched until you open a subnet, so the overview loads quickly.

• Path Finder
  You can pick any two devices on the map and see the connection path between them highlighted, with a hop count.

• Analysis Lenses
  You can highlight Layer 2 adjacency, Layer 3 reachability, internet-exposed devices, or devices that haven't been observed recently.

• Unmanaged Device Detection
  You can surface devices that are active on the network but were never added to inventory.

• Node Detail Panel
  You can review the full profile of any device, subnet, or gateway without leaving the page, and filter the Devices table by any value.

• Auto-Discovered Relationships
  You benefit from device-to-device relationships discovered automatically from network signals, with your manually curated relationships layered on top.

---

Prerequisites

• Supported Inspector Data
  At least one inspector that reports device network information, with a completed inspection since the feature became available on your account (the October 2026 release for most partners). Topology data is not backfilled, so the map fills in as each launchpoint's next inspection runs, on schedule or run manually.

• Environment Access
  Standard View access to the environment. No separate topology permission is required.

• Subnet or Gateway Data
  A device appears on the map only if it has a subnet or default gateway. Devices without either are counted under Excluded Device(s) in the summary bar.

---

Supported Data Sources

Every device inspector that reports a subnet or default gateway contributes basic placement on the map, including Network Discovery results.

Device-to-device connection data (switch ports, VLANs, wireless clients, and routed paths) currently comes from the following network inspectors:

The Ports section of the node detail panel is currently populated for HP ProCurve switches.

Connection signals are matched back to specific devices by exact MAC address, IP address, or hostname. Signals that can't be matched yet are re-checked several times a day and linked automatically once the device is inventoried.

---

How to Use

1. Click on an environment's name from anywhere within the platform.
2. Open the Asset Inventory feature and select Devices.
3. Locate the Network Topology Explorer card above the device list. The card is collapsed by default and displays a BETA badge.
4. Click the card header to expand it. Nothing loads until the card is expanded, so there is no performance impact on the Devices view.
5. Use the Subnet selector to choose your view:
   1. Subnet overview (default): Each subnet appears as a bubble sized by its device count. Click a bubble to drill in.
   2. All devices (full graph): Shows every device across the environment, up to the configured Max count.
   3. A specific subnet: Shows only the devices in that subnet.
6. Click any node to center it and open its detail panel.

Lenses, Path, and Node types appear once you open a subnet or switch to All devices (full graph). They are hidden on the Subnet overview.

To work in fullscreen during a live troubleshooting session, click the fullscreen toggle. Press Esc to exit.

Tip: A plain scroll over the map scrolls the page. Hold Ctrl (Windows) or ⌘ (macOS) and scroll to zoom the map.

---

Filters

Open Filters to refine what appears on the map.

Layouts

• Tiered (default)
  Arranges the map top-down by network role. Gateways sit at the top, followed by subnets and VLANs, then routers, firewalls, and wireless controllers, then switches, then access points, then hypervisors, storage, and UPS devices, then endpoints such as workstations, virtual machines, printers, and IoT devices. Unmanaged nodes sit at the bottom. When more than 10 devices share the same parent, they wrap onto additional rows.

• Grouped, Force, Radial, and Grid
  Alternate arrangements for exploring the same data.

---

Find Node

Type a name in Find node to search the nodes loaded in the current view, including devices, subnets, gateways, and unmanaged nodes. Selecting a result centers the map on it, highlights it, and opens its detail panel. On the Subnet overview, Find node centers the matching subnet bubble. Click the bubble to open that subnet.

---

Analysis Lenses

Lenses highlight one category of connection or device state and dim everything else on the map.

Lenses are disabled while a Path Finder result or a Node types highlight is active.

---

Node Types

Use Node types to highlight every node of one or more network roles at once, such as all firewalls in an environment.

Available roles include Router, Switch, Firewall, Access point, Wireless controller, Hypervisor, Virtual machine, Workstation, Printer, IoT device, Storage, UPS / power, VLAN, Unmanaged, and Unknown network role.

Only roles present in the current view can be selected.

---

Path Finder

Path Finder traces a connection path between two nodes on the current map and highlights it. It prefers routes through subnet, gateway, and VLAN placement and only uses device-to-device relationships when no placement-only route exists, so the result is not always the fewest possible hops. Both the source and target must be loaded in the current view.

1. Select a Source device.
2. Select a Target device.
3. Click Find path.

The result displays one of the following:

• Physical path · N hops
  The route uses only subnet, gateway, and VLAN placement.

• Logical path · N hops
  At least one hop uses a discovered or curated device-to-device relationship.

• No path found
  No connection could be traced between the two devices.

---

Focus View

Double-click any device to load only that device and its direct neighbors. Click Exit focus in the card header to return to the full map.

---

Node Detail Panel

Click any node to center it and open its detail panel.

• Devices
  Overview, Sources, Network, Interfaces, Hardware, Virtualization, Ports (for switches), Relationships, Activity, Security (Internet exposure, antivirus, EDR, and, when available, Windows 11 readiness and managed status), Lifecycle, and Tags. Empty sections are hidden, and the Overview section opens by default.

• Subnets
  CIDR and the number of devices in the subnet.

• Gateways
  IP address and Also device, which shows whether the gateway is also an inventoried device.

• Unmanaged devices
  Name and IP address as seen on the network.

Most fields include a filter icon. Click it to filter the Devices table below the map by that value.

---

Unmanaged Devices

Turn on Include: Unmanaged devices in Filters to surface devices that a supported network inspector has seen in an ARP table, client list, or routing table but that don't match anything in your inventory. These appear as dashed "ghost" nodes.

---

Map Controls and Summary Bar

• Legend
  A collapsible key to node types, outline states (Exposed, Fresh, Stale), and link types (L2 link, L3 route, Related). It is open by default.

• Zoom and Fit to View
  Zoom in, zoom out, or fit the entire map to the card.

• Mini-Map
  Shows your position on the map, which is most useful on large maps.

• Hover Card
  Hover over a node to see key details and badges: Exposed, Stale, Unmanaged, and Also device.

• Summary Bar
  Displays counts for the current view: Device(s), Subnet(s), and Gateway(s), plus Unmanaged when unmanaged devices are shown, Max count in the full graph, and Excluded Device(s) when any devices have no subnet or gateway. The Subnet overview shows only the subnet count. Notices appear here when results are truncated by Max count, when device-to-device connections are hidden, or when unmanaged devices are truncated.

---

Refresh the Map

Use the Refresh menu to update the map:

• Refresh with current data
  Reloads the current view.

• Rebuild topology from scratch
  Recomputes the full graph from data that has already been ingested. This may take a while on large environments.

New devices and connections are added only when new inspection data is ingested. Unresolved network observations are re-matched automatically several times a day, and observations older than 30 days are retired nightly. Discovered device-to-device connections that are not re-observed for 45 days are removed. Curated relationships created on the Related Assets tab are never removed automatically.

---

Devices Table Columns

Two optional columns are now available in the Devices table, hidden by default: Default Gateway and Primary Subnet CIDR.

---

Use Cases

• Find a Misconfigured Adapter
  A workstation can't reach a file server. Drill into the subnet and see that the workstation sits on a different subnet than expected, identified in seconds instead of by logging into a switch.

• Trace a Path to the Internet
  Use Path Finder between a laptop and the firewall to see how the laptop reaches it through its subnet, gateway, and any discovered connections, instead of piecing it together from individual device records.

• Catch Untracked Hardware
  Turn on Include: Unmanaged devices while reviewing a guest Wi-Fi network to surface devices that have been active on the network but were never added to inventory.

---

Current Limitations

• Network Topology Explorer complements the Devices table; it does not replace it.
• Physical switch-port-to-switch-port link discovery (LLDP/CDP) is not yet supported. Only ARP-table, client-list, and routing-table relationships are shown.
• Node layout is generated automatically and can't be manually arranged.
• The card can't be turned off per account or per user. Because it is collapsed by default, it has no load cost until expanded.
• Export is not yet available.
• Live online/offline device status is not yet shown on nodes.
• When more than 2,000 devices are in view, device-to-device connections and unmanaged nodes are hidden and a notice is displayed. Select a single subnet to see them.
• Unmanaged devices are capped at 2,000 per view. When the cap is reached, a notice is displayed. Select a single subnet to see them all.