Tutorials · Security Operations
How to Find Every Device on Your Network (Asset Inventory)
You cannot protect what you do not know about. Build a device inventory from network scans, switch MAC tables, DHCP leases and NavCloud, and keep it up to date.
Before you start
- Nmap
- Read access to switches, DHCP server and NavCloud or your controller
Step by step
Scan each subnet
A ping and ARP sweep finds devices that answer on the network.
sudo nmap -sn 10.1.10.0/24 -oG - | awk '/Up$/{print $2}'Export DHCP leases
The DHCP server knows every dynamic device, its MAC address and host name.
Read switch MAC tables
MAC tables show devices that do not answer pings (cameras with firewalls, IoT). Note the switch and port for each MAC.
Merge into one list
Combine IP, MAC, host name, manufacturer (from the MAC OUI), switch port, VLAN, owner and purpose in a spreadsheet or asset tool.
Investigate unknown devices
Every device without an owner is a risk: find it by switch port, label it or remove it.
Keep it current
Repeat monthly, and use 802.1X or MAC alerts so new devices are noticed automatically.
Commands are generic, industry-standard examples. Exact syntax and menu names vary by model and firmware; check your device's manual on the Documentation page.
Pro tips
- NavCloud lists all managed Navijin devices and their clients, which covers a large part of the inventory automatically.
- Include firmware version and end-of-support date: it drives your upgrade plan.
FAQ
Frequently asked questions
Which fields matter most?
IP, MAC, location (switch/port), owner, purpose, firmware version and support status.
Keep learning
Related guides
Scan for vulnerabilities
Read more →Find and fix IP address conflicts
Read more →Plan a network refresh
Read more →How to Set Up a WireGuard VPN Server for Remote Access
WireGuard is a fast, modern VPN with a small, auditable code base. Build a WireGuard server on Linux, add users with their own keys and route them only to the networks they need.
Read more →How to Scan Your Network for Vulnerabilities With Nmap and OpenVAS
Find open ports, outdated services and known vulnerabilities before attackers do. Discover hosts with Nmap, then run authenticated vulnerability scans with Greenbone OpenVAS and fix what matters first.
Read more →How to Build a Free SIEM With Wazuh for Network and Server Logs
A SIEM collects logs from servers, firewalls and switches in one place and alerts on attacks. Install Wazuh, add agents and syslog sources, and tune the first alerts.
Read more →Stuck on a step?
Ask Navijin technical support or an authorised partner for help with your configuration.