Tag Queries

Tag Queries

1.      Introduction

Tag Queries are SQL Queries to select target hosts or Client IP Addresses from different tables according to requirements. Tag Queries is executed on Database, and the result set is used as target devices. Tag Queries are used in Inventory Rules and Classification Rules. You can define your queries based on Any Host information, IP Ranges/Blocks, Network Device Information or any Inventory Data, which is collected from client devices.There are 59 predefined Tag Query definitions available by default. You can add as many as tag queries.

2.      Tag Query Definition

To define Tag Queries navigate to SettingsàSystem Parameters and select Tag Queries menu. On the right-hand side in the upper cornet click “Add Query” button.


Figure 1 Navigate to Tag Query Definitions

Field Name

Definition

Name

Name of your Tag Query. This name will be shown in Inventory and Classification Rules.

 

 

Type

Type Of Your Query. Defines which table(s) could be used for querying host information.

Query Table

Name of the table (s) according to your Type selection. You can only select one table per query.

Query Table Column

Name of the Column in the selected table will be checked.

Query Value

The value will be checked against the selected Table Column.

Condition

How Query value will be evaluated in the SQL Query.

 


Figure 2 Defining Tag Query

By using the above mappings, an SQL Query is created at the background:

SELECT IP_ADDRESS from NAC_DETECTED_HOSTS WHERE MACVENDOR=’Cisco’

You can edit condition string by using other SQL keywords; LIKE, AND, OR, <> e.t.c

After finishing your settings, you can save your tag query to later use in Inventory or Classification rules.

3.      Tag Query Results

Because Tag Queries plays a crucial role in Inventory and Classification rules, you can check weather your Tag Queries Evaluated correctly or not. To view your Tag Query result navigate to All Hosts on the main menu and click the arrow icon next to the main menu items.


Figure 3 Open Toggle Menu

Once you click the arrow icon, hidden Toggle menu comes out the screen.


Figure 4 Toggle Menu

Under the Tag Queries Section, you can find all defined Tag Queries. Tag Queries again grouped into Types here. In a production environment, you may have so many Tag Queries and testing or finding one by one may be difficult. To eliminate this difficulty on the top of the Toggle menu, there is a search box to find your queries. Once you find your Tag Query, just click on it to view results on the Hosts List table.


Figure 5 Searching and Viewing Tag Query Results



    • Related Articles

    • Classification Rules

      1.      Introduction  Classification rules enable automatic action on devices that meet specific criteria.These criteria are defined by using Tag Queries. 2.      Classification Rule Definition To define Classification Rule navigate to All Hosts and ...
    • Inventory Rules

      1.      Introduction  Although granting network access only to authenticated and legitimate devices is of utmost importance, keeping the security posture at a high level is also necessary. Inventory Rules is used for continuously checking your ...
    • NetCyte DNS Security Quick Deployment Guide

        Captive Portal Quick Deployment Guide       1.      Summary This document is a summary of the quick deployment of the Captive Portal component of NetCyte NAC solution from pre-configured virtual appliances. 2.      Objective The objective of the ...
    • NetCyte Management Main Screen

      One of the most crowded screen of NetCyte management platform is Main Screen or "All Host" screen. This part of management platform is designed to show general information about client device, system and other useful functionalities. In this article, ...
    • DnsCyte Quick Deployment

      DnsCyte  Quick Deployment Guide 1.      Summary This document is a summary of the quick deployment for DNSCyte.  2.      Objective The objective of the rapid deployment is to demonstrate discovery and analysis features of DNSCyte. DNSCyte is a DNS ...