Freshservice Discovery Probe User Guide 1. What is Freshservice ‘Discovery Probe’? 1.1 What details does Probe fetch? 1.2 How does Probe fetch the information? 2. What are the minimum system requirements for installing Probe? 3. How do I download and install Discovery Probe on my computer? 4. What is Freshservice Discovery ‘Agent’? 4.1. What additional benefits do I get by installing the Agent? 4.2. What are the minimum system requirements for installing the Agent? 4.3. How do I download and install the Agent? 5. How to scan computers or import users from your Active Directory using Discovery Probe? 6. How to prevent unwanted software from being scanned? 7. How to convert a Non CI software application to a CI? 8. What happens when a software application is uninstalled after it has been scanned? 9. How to track dissociated or deleted software? 10. How to scan your IP Range for assets using Discovery Probe? 11. How to schedule periodic scans using Discovery Probe? 12. How to manage scanned assets and error messages using Discovery Probe? 13. How to troubleshoot common error messages displayed during asset recovery? 13.1. Invalid Credentials 13.2. DCOM / Firewall Settings Error 13.3. Requests Blocked by Firewall 13.4. Invalid SSH Credentials 13.5. SSH Connection Disabled 13.6. Unsupported Operating System 13.7. Unable to ping device What is Freshservice ‘Discovery Probe’? Discovery Probe is a Windows application that makes Asset Management easier by tracking hardware assets in your network. Once you install Probe on a computer in your network, you can use it to scan the network and discover all kinds of computers (including those running on Mac OS X or Linux), network routers, switches and other devices like printers etc. This list of devices can then be imported and populated in the list of CI’s in your Freshservice account. Besides scanning for devices, you can use Probe to import users from your Active Directory and also schedule periodic scans. What details does Probe fetch? Laptops and Desktop Computers For laptops and desktop machines, Probe fetches details like: ● Name ● CI Type ● Product (Finds the Product based on the model name of machine. If not found, creates and associates it) ● Manufacturer ● Serial Number ● Last Audit Date ● OS ● OS Version ● OS Service Pack ● Memory ● Disk Space ● CPU Speed ● CPU Core Count ● Mac Address ● Location (Needs to be manually set for the Probe entry in the account) ● Components: Processor, Memory, Logical Drive, Network Adapter ● Software: CIs and Non CIs Software Applications Software applications that are added as ‘Products’ in the Product Catalog will be created as CIs and the others will be created as Non CIs and listed with the host computer in the CMDB. Software CI details include: ● Product ● Version ● Installed Machine ● Installation Path ● Last Audit Date ● Installation Date Users For the Users that are imported, Probe fetches details like: ● ● ● ● ● ● ● First and Last Name Email (If no valid Email ID is found, the user will be created as a deleted requester) Department (Finds or creates) Address Job title Phone Number Time Zone How does Probe fetch the information? Probe uses WMI Queries to fetch data from Windows machines. By using SSH, Probe executes shell commands and fetches information from Linux and Mac machines. SNMP protocol is used to fetch Object IDentifiers (OID) from Network devices like Printers, Routers, Firewall and Switches. Then later the OID can be used to fetch information for the device. What are the minimum system requirements for installing Probe? Here is the complete list of requirements for installing Discovery Probe: ● ● ● ● ● Operating System: Windows XP, Vista, 7, 8 or higher Processor: Intel Pentium class of processors or higher RAM: 1GB or more Storage: 25MB for free space in your hard drive An active computer that is always available to perform scheduled scans and updates. How do I download and install Discovery Probe on my computer? On a computer that meets all the requirements mentioned above, follow these steps to install Discovery Probe: Login to Freshservice as an admin. Then go to the Admin tab and click on Discovery. Click on the Download Application button to download the setup file. Double-click to run the setup file and start the installation wizard. Once you finish the installation, the Discovery Probe icon will show up in the system tray. NOTE: As we recommend the use of Discovery Agent [see below] for Asset discovery, Windows Discovery is disabled in Probe by default. You can enable it in Probe Settings. What is Freshservice Discovery ‘Agent’? Freshservice Windows Discovery Agent (FSWinAgent) is an application that you can install on all Windows machines in your network. It then helps you keep track of those machines without the interruptions that Probe might sometimes face. FSWinAgent collects the machines’ details without needing any authentication from the respective user. The details can then be sent to a server and populated in the Configuration Management Database (CMDB) of Freshservice. What additional benefits do I get by installing the Agent? Besides making the discovery of your assets extremely easy, the Agent helps you keep track of the assets better in the long run. Its key benefits include: Dynamic Discovery: Every time FSWinAgent detects a change in its host machine, it will update the data on the server. This makes sure that the database stays the best possible representation of your assets at all times. ● Periodic Discovery (also available in Probe): It sends updates to the server on a weekly basis to maintain an up to date record of all your assets. This is done regardless of whether changes were made to the asset or not. ● Auto Upgrade: You would not need to worry about upgrading FSWinAgent every time a new version is available. We’ve got it covered. ● Lastly, Windows settings like DCOM and Antivirus, Firewall etc. will not impact the discoverability of assets. ● What are the minimum system requirements for installing the Agent? Here’s the list of supported Operating Systems for installing the FSWinAgent: ● ● ● ● ● ● ● ● ● ● ● Windows XP (Home and Professional editions only) Windows Vista Windows 7 Windows 8 Windows 8.1 Windows 2003 Windows 2003 R2 Windows 2008 Windows 2008 R2 Windows 2012 Windows 2012 R2 As a prerequisite, Microsoft .NET 4.0 client profile should be installed on the device before the agent can be installed. How do I download and install the Agent? Once you install Discovery Probe, you will be prompted to authorize it, import users and scan your network. On the ‘Scan Network’ phase, you get the option to download the Agent installer. In case you skipped the step, you can always access the Agent download link by launching Probe and going to Settings → Configuration. Then you can use one of the following methods to install the Agent on machines in your network easily: To install it on a single machine, simply double-click the msi file. To install it on all machines in a domain, use Group Policy Object in the Active Directory. ● To install it on all machines in a workgroup, use the PsExec tool. ● ● How to scan computers or import users from your Active Directory using Discovery Probe? Follow these steps to scan computers or import users from an Active Directory. The users will be added as unverified requesters. Type the Domain Name of the Active Directory in NetBios format in the Domain Name field. ● Enter the Domain Controller Name or IP Address in the Domain Controller field. Domain Controller is the machine in which Active Directory is installed. ● Type the username and password in the corresponding fields. Please note that the user credentials should have privilege to read the Active directory. Using an Administrator account is preferable. ● ● ● Click Import Users/Scan Domain. On the next step, Organisational Units available in the domain would be displayed. Select the OUs from which the users/computers need to be imported/scanned. How to prevent unwanted software from being scanned? You would generally want Probe to track licensed software but there might be some freeware that you might not want tracked. You can add all such applications as “Blacklisted Software”. ● ● ● Login to Freshservice as an admin. Go to the Admin tab and click Discovery [under Configuration Management]. Click on Probe Settings and add the software to the list. How to convert a Non CI software application to a CI? If a software application is not added in the Product Catalog in Freshservice, it is displayed as a Non CI. If a CI that you’d like to track gets scanned as a Non CI in Probe, you can can convert it easily. ● ● In Freshservice, go to the CMDB tab and select the host machine. Go to the Software tab and click on Non CI’s to access the list ● Hover over the one you’d like to convert and click on Create CI. ● In the form for creating the new CI, you can select a Product from the corresponding drop-down menu or add a new product. What happens when a software application is uninstalled after it has been scanned? If Probe scans a software application and it is uninstalled later, during the next scan, it notices that the application is missing. If the application had been added as a CI in Freshservice, Probe will dissociate it from the device and it will stay in the CMDB as an orphan CI with no hardware associated with it. How to track dissociated or deleted software? If you’ve dissociated a software application from the corresponding hardware device or deleted it from Freshservice’s CMDB, you can track it by checking the recent activity list for the device. ● ● ● Login to Freshservice as an admin. Go to the device in the CMDB. Click on Activity from the list in the left pane. How to scan your IP Range for assets using Discovery Probe? Here’s how you scan your network for assets: Enter a start and end IP address or type in a domain you want Probe to scan. Type in the Windows Credentials - these will be used to authenticate all Windows machines in your network [required only if Windows Discovery is enabled]. ● Type in the SSH Credentials - these will be used to authenticate all Mac OS X and Linux based machines in your network. ● For other devices like printers or routers, if there is a dedicated SNMP string for your network, type it in the SNMP String field or the default string “public” would be considered during scan. ● ● ● Click on Next/Scan Network Devices to start the scan. How to schedule periodic scans using Discovery Probe? Probe can help you keep track of new devices that get added to the network. Here are the steps to schedule automatic scans: ● ● ● ● ● ● ● Give a name to the Probe installation so that it is easily identifiable from your admin panel. Turn on Device Scanning. Choose the days on which you want Probe to run every week along with the time. Turn on Active Directory User import. Select the days when you want user information to be fetched. Click on the Get Started button to finish setting up Probe. If the schedule needs to be changed later, it can be configured through Settings → Schedule. How to manage scanned assets and error messages using Discovery Probe? The ‘Results’ screen of the Discovery Probe is classified into 4 tabs to help you manage your assets efficiently. The Devices tab displays the list of all the discovered assets. The list shows different types of devices including workstations, network routers, printers etc. along with their names and last scan information. You will also be able to see any error messages associated with each configuration item in the list. The Scan Errors tab picks out every error that occurred during recent scans and displays them as a consolidated list. Clicking on any of them will give you a detailed report on what went wrong while the system was trying to scan the asset. You can try troubleshooting the errors based on the displayed message. The Scan Device button on the top right corner of the Devices/Scan Errors tab will let the user scan individual assets. Users can enter Local/Admin credentials by choosing the ‘Local credential’ radio button. If a user chooses ‘Global Credentials’ then IPRange Scan or Domain Scan credentials should be used. The next one is the Domains tab, which lists out every unique domain address that has been identified during the scan. A progress bar on the right shows you if any of the scans are currently running. You can get a quick glance at the number of users present in the domain and the total number of assets that have been scanned so far. You can also manually import users or scan the network again by using the corresponding options.The New Domain option can be used to add a new domain for scanning. Finally, the IP Ranges tab lets you add any new IP ranges to your Discovery Probe and start scanning it along with any of the existing scans that might be running already. To avoid overlaps, please make sure you define new IP ranges that aren’t already being monitored. How to troubleshoot common error messages displayed during asset recovery? If Probe is unable to scan all the available assets, it might display an error message. Here are the troubleshooting steps for some of the common errors: Error: Invalid Credentials Cause: The credentials you provided during the scan don’t match the actual username and password of the configuration item. ● Make sure you specify the right credentials to the Discovery Probe before the scan. ● Go to the Devices tab in Probe. Click on Scan Device and include the hostname with local credentials. Perform a scan and make sure everything is okay. Install the Freshservice Discovery Agent on the device to scan it seamlessly in future. Error: DCOM / Firewall Settings Error Cause: There is an issue with your DCOM/Firewall Settings that doesn't permit the asset in your network to make WMI requests. ● Download this executable file in the client device. ● Locate FSScanConfig.exe in the downloaded folder on the client machine and double click it. ● UAC dialog box will prompt for Administrator access. Click OK. ● The DCOM/Firewall Settings should have gotten resolved now. Install the Freshservice Discovery Agent on the device to scan it seamlessly in future. Error: Requests Blocked by Firewall Cause: The ports required for sending and receiving WMI requests in the device might not be open. ● Download this executable file in the client device. ● Locate FSScanConfig.exe in the downloaded folder on the client machine and double click it. ● UAC dialog box will prompt for Administrator access. Click ok. ● The DCOM/Firewall Settings should have gotten resolved now. Install the Freshservice Discovery Agent on the device to scan it seamlessly in future. Error: Invalid SSH Credentials Possible Cause 1: SSH credentials given on the scan page might be wrong ● Update the username and password for your SSH connection Possible Cause 2: Sometimes, scanning certain parts of your devices might require root access (for Linux and OS X users) ● Check if the device was on during the scan. ● Try passing the root password of your machine to Probe (optional). Error: SSH Connection Disabled Cause: The SSH connection is disabled To enable SSH on Mac OS X: ● Go to System Preferences → Sharing (under Internet & Wireless) ● Enable 'Remote Login' on the LHS list ● Select 'All Users' under 'Allow access for' Linux Users and Mac users can also download and install SSH server and client in the device. Error: Unsupported Operating System Cause: Discovery Probe doesn't support this OS yet ● Send us the name of your Operating System and any other relevant details at support@freshservice.com. We'll get in touch with you. Error: Unable to ping device Try pinging the device manually ● Open command prompt in your computer (Terminal if you are using Linux or OS X) ● Type “ping <HostName / IP>” If all the packets are sent and received and if you do not see any timeouts, then everything is working fine. Try scanning the specific device again in Probe. Possible Cause 1: The device is not available in your network ● Please ensure that the device is available in the same network Possible Cause 2: The device is currently turned off ● Please check if the device was turned on during the scan. Possible Cause 3: Your firewall is blocking ICMP packets from the Discovery Probe ● Check whether there is an inbound rule in your Firewall Settings to allow ICMP packets. If not, create an inbound rule in the Firewall to allow them. Install the Freshservice Discovery Agent on the device to scan it seamlessly in future. For further questions or clarifications, please contact support@freshservice.com.