Have one property for all device types containing the full SW/FW-version
Summary: Jeroen van Zoeren discusses the difficulties of finding software and firmware version information across different devices, highlighting inconsistencies in naming and completeness. They suggest a unified field for all device types to simplify reporting. Justin Lanoue responds with a link that might address the issue, pointing to a resource on normalized properties in account settings.
On most devices, the software/firmware version can be found in the properties, however almost every device has a different name for this property or uses a different field to show this. Also, sometimes this info is not found on the Info-tab on the main resource, but deeper inside another Datasource.
Some examples;
FortiManager, Info-tab on main resource > auto.fortinet.softwareversion
FortiGate, Info-tab on main resource > auto.fortinet.fortigate.firmware.version
FortiMail, Info-tab after selecting the 'Fortimail: Global Statistics'-datasource > auto.fortinet.fortimail.system.firmware
Cisco ASA, Info-tab on main resource > system.sysinfo
Moreover, sometimes this info is not complete and is missing part of the firmware.
Cisco ISE, Info-tab on main resource > auto.entphysical.softwarerev
this field is missing the patchnumber for the software, which is vital information if we are investigating a vulnerability.
All this makes creating reports and using the Resource Explorer cumbersome, as a report will contain many columns if you combine different devicetypes and need to report on FW-version, and in the example of combining FortiManager and FortiMail it is even impossible, as you cannot combine those at all, the report returns empty. Now most of the time we create a separate report per device type, and in the case of Cisco ISE we still need to log in to every device to check the patchnumber.
It would be a nice addition to have a field on every resource, which is named exactly the same, and contains the full FW-version including any patch- or buildnumber. This way, we can combine different devicetypes and only report on one column containing the version.
Justin Lanoue
·1 week agoThis is pretty much what you want.
https://www.logicmonitor.com/support/settings/account-information/portal-settings#h-normalized-property