AdministrationAI AssistantInsightsITAMMapsMCPPlatformScan
- Scan · SHA-2 for SNMPv3: SNMPv3 credentials also offer SHA-256, SHA-384 and SHA-512 as Authentication Algorithm. This allows inventorying devices that accept only SHA-2.
- MCP · Tools with a Fixed Task for AI Tools: A connected AI tool receives 27 tools, each with exactly one task, such as searching risks or changing the processing state of a CVE finding. 19 of them read, eight change data.
- Insights · Readable Conditions and Displays in the Query Tab: The Query tab names every operator of a condition, such as is empty, and names a display without a title after the step it shows. Last Run shows the same run as the Result tab.
- Platform · Search Subscriptions: The Switch Subscription dialog has a search field that filters subscriptions by display name, licensee and subscription ID. Each detail of a subscription has a copy icon.
- Administration · Support Access for Up to 30 Days: Support access can be granted for up to 30 days. It ends at the end of the selected day and can be revoked at any time before then.
- ITAM · Running Costs and Payments: The key figures distinguish Running Cost / Month and Running Cost / Year—the running contracts converted to the period—from Payments This Month, the amounts due in the month. Tooltips explain how the figures are calculated.
- Maps · Device Names Across the Full Card Width: In Topology, IP Networks and IP Segments, device names use the free width of their card and are shortened only at its edge; the tooltip shows the full name. A port without a reported state, such as the host port of a virtual switch, appears as a dashed outline in Port Usage.
- Insights · Notes Using the Names from the Query Tab: The run notes in the Result tab name steps, types, fields and relation types as the Query tab does, and a chart display shown as a table states the reason. After an adjustment, the confirmation names the new version number.
- AI Assistant · Tools by Access Level: If a user’s Module Access for the AI assistant is set to Viewer, the assistant only reads and changes no data. The same applies to connected AI tools.
- AI Assistant · Independent of API & MCP Requests: The assistant does not count against the subscription’s API & MCP Requests. It is locked only when the AI quota is used up.
- Scan · Personal Data in Active Directory: If Collect Personal Data is cleared, the Active Directory inventory also leaves out the telephone numbers, office and address of users and contacts.
- Scan · Microsoft 365 Inventory Runtime: The Microsoft 365 inventory queries Exchange Online, Teams and SharePoint Online in parallel instead of one after another, and defers throttled requests instead of waiting for them. The scan time is reduced considerably, especially in large tenants.
- Scan · Missing Objects in the Result: If the Microsoft 365 inventory cannot retrieve objects despite retries, Last Scan Details names how many are missing per service, and the job ends with a warning.
- Scan · Overview of macOS Systems: After the next inventory, the overview of a macOS system shows model, processor and network address in the same format as Windows and Linux systems, such as Mac mini (Mac16,10) and Apple M4 10C. Only user accounts count as local administrators, not system accounts.
- Maps · Search in the Topology: The search in the Topology map highlights only the objects that match the entered text.
CVE AnalysisMCPREST APIScan
- CVE Analysis: The CVEs card in an asset’s overview counts only open vulnerabilities and shows the same numbers as the CVEs tab.
- MCP: The MCP server’s query tool applies every filter condition, including negated comparisons and conditions on list fields.
- REST API: The REST API returns the data of every row when loading an asset’s related data (expands), including when paging on with a cursor.
- Scan: In a Windows (AD) scan job, Remove Restriction lifts a system selection so that the scan again covers all Windows systems in Active Directory—including those added later.
- Scan: The Microsoft 365 inventory captures team activity in every tenant.
- Scan: The Cisco Meraki inventory captures a network’s group policies even if it contains layer 7 firewall or traffic shaping rules for applications or application categories.
- Scan: After the next inventory, Linux systems show their manufacturer in the Devices list.
- Scan: The SNMP inventory creates the chassis of a stack as separate objects, and the device keeps its network data.
- Scan: The SNMP inventory creates tape libraries such as the IBM TS4300 as a device type of their own.
- Scan: The SNMP inventory captures Zebra label printers including their page counter.
- Scan: The SNMPv3 inventory also reaches devices using SHA-1 with AES-192 or AES-256, such as FortiGate firewalls.
- Scan: The SNMP inventory captures the LLDP neighbors of FS.COM switches, so the Topology shows their connections.
- Scan: The VMware inventory completes even if the vCenter’s tags cannot be read.
- Scan: The XenServer inventory fills in the BIOS details of hosts and virtual machines, such as BIOS vendor, BIOS version and product name.
- Scan: The Windows inventory captures the Microsoft SQL Server version including installed updates, so the CVE analysis assesses the actual patch level.