Skip Navigation LinksALVAO 11.2Admin guideAsset ManagementHardware and software detectionDetection method selection Skip Navigation Links.


Skip Navigation LinksALVAO 11.2 / Admin guide / Asset Management / Hardware and software detection / Detection method selection

Detection method selection

The choice of detection method depends primarily on the capabilities of the operating system of the detected computer. The following table lists the possible detection methods.

Detection method Description
automatically (default) This option is a combination of the Autonomous Agent, MS SCCM, Agent over TCP/IP (deprecated), and No Agent options. Autonomous Agent is the preferred method of discovery. The other detection methods are tried only when the Autonomous Agent has not contacted the AM WebService for 7 days. If the Microsoft Intune Connector module is available, the PC tries the MS SCCM method of detection first. If this fails, it tries the connection by pinging the remote PC. If the PC is active, Collector tries to detect the PC using the Agent over TCP/IP (deprecated). If there is no Agent on the remote computer, Collector attempts to perform discovery without an Agent.
Autonomous Agent The agent periodically asks the AM WebService whether to perform discovery and whether to detect HW or SW. By default, the Agent polls every 2 hours. If the WebService tickets a detection, the Agent creates a detection (CXM file) and sends it to the WebService. If the detection fails to be sent, the Agent tries again (by default every 15 minutes).

If using the Agent, we recommend using this detection method.

Advantages/disadvantages:
+ Detected stations can be anywhere outside the corporate network, communication is via the Internet.
+ Low network traffic - data sent is compressed.
+ No need to enable the port in the station's firewall - communication is via the standard HTTP/HTTPS protocol.
+ Eliminated risk of bad computer detection due to outdated DNS records.
+ Detections are performed in parallel.
- Immediate detection cannot be performed (Agent contacts WebService at certain intervals)
- Need to install Agents and distribute WebService address settings.
MS SCCM This option is only available after enabling the ALVAO Microsoft Intune Connector module.

Collector reads hardware and software data on the computer using the set connections to SCCM. The computer searches through all connections one by one until it finds it. This eliminates the need to install agents on the target computers, nor is there a need to set user permissions to access WMI, the remote registry, and hard drives.

Advantages/disadvantages:
+ HW/SW data is quickly retrieved from SSCM
- Alvao cannot control how old the data is in SCCM.
- Detections are sequential.
manually Collector does not process tickets with this detection method. You must perform the detection manually on the detected machine by running AMAgent.exe. The program will generate files with the .cxm extension, which you can then load into the AM Console using the Tools - Detection - Load from file.
Use this detection option even for computers that cannot be detected (Linux, Apple, etc.).
without Agent (deprecated) This option comes from older versions of the system and is replaced by automatically.

This detection method can only be used on computers running Windows 2000 and above. There is no need to install Agent on detected computers. Detection is performed using DCOM, WMI and remote registry access.

Administrator rights are required for following services on the computers: WMI, remote registry, administrative access to hard drives (computer name).
In a standard Windows Network Domain environment, to meet this condition, all you need to do is enable the "RemoteAdmin" service in bulk on computers using Group Policy in the firewall.

Advantages/disadvantages:
+ No need to install Agents on detected stations.
+ Great network communication - data is not compressed during detection.
- Risk of another machine being detected due to bad DNS entries.
- Sometimes it is problematic to set up the detected computer so that agentless detection works.
- Detections are sequential.
Agent over TCP/IP (deprecated) This option comes from older versions of the system and is replaced by the automatic option.

Collector first tries the connection by pinging the remote machine. An agent must be installed on the detected computers. Communication between Collector and Agent is via TCP/IP (deprecated).

Advantages/disadvantages:
+ Low network traffic - detection data is sent compressed.
+ Instantaneous detection can be performed.
- Risk of another computer being detected due to bad DNS entries.
- You need to enable a specific port in the station's firewall.
- Detections are sequential.

You can also detect computers and devices with the ALVAO Microsoft Intune Connector module and the ALVAO SNMP Network Discovery module.

By default for all computers (in global detection settings) the detection method is set to automatic, which suits detection of Windows 95, 98, Me and NT operating systems using Agent over TCP/IP (deprecated) and Windows 2000 and higher without Agent (deprecated) or with Autonomous Agent or Agent over TCP/IP (deprecated). For computers that are not connected to the network and for undetectable computers, set the detection method manually.

Note:
If the detection in "Agent over TCP/IP (deprecated)" mode fails to establish a connection via computer name, try a connection via IP address.
Note:
By default, Collector uses ping to test if the detected computer is on. For the "Agent over TCP/IP (deprecated)" detection mode, ping can be disabled by setting the AgentTcpipPing registry entry in the HKEY_LOCAL_MACHINE\Software\ALC\ALVAO Asset Management\Collector path to 0 (dword) or in the Collector settings.
Caution:
In "Agentless" mode, if computers are detected that are split by an internal firewall on the network and yet are in the same domain, the following ports need to be enabled on the firewall:
  • WMI - port 135 + <a random port from the dynamic TCP range>, this varies by OS:
    - 1024-5000 (Windows 2000, Windows XP, and Windows Server 2003)
    - 49152-65535 (Windows Vista and above, Windows Server 2008 and above)
  • Remote registry - port 445
  • Administrative Disk Sharing - ports 135-139 and 445.
See more articles:
Windows Network Services Overview and Ports
Setting up a fixed port for WMI

Detection method by computer operating system

We recommend that computers that are connected to a computer network be detected as follows, depending on the operating system.

  • Windows 2000 and above - detection method: automatic - Collector can detect data using standard operating system components. There is no need to install Agent on the stations.
    If you choose to install the Agent, you must be running Windows 7 or higher.
  • Other operating systems - detection method: manually - computers with other operating systems, such as Linux or Apple computers, cannot be automatically detected. Select the detection method manually for these. The necessary data must be entered into the system manually, see Inserting computers that cannot be detected.

 

Did not find what you were looking for? Ask our technical support team.