How profiles are assigned

The system relies on several collector modules that use various means to collect endpoint and traffic data, which are forwarded to a central Server module. The endpoint profiling engine then aggregates the data for processes and uses it to assign profiles to all discovered endpoints.

Plixer Endpoint Analytics uses MAC addresses as the primary identifier for endpoints, but in certain scenarios, the IP address is the sole identifier available. In such cases, only “IP-learned” attributes can be captured for use by the endpoint profiling engine.

Note

When assigning profiles and monitoring the network edge for changes, Plixer Endpoint Analytics prioritizes “MAC-learned” over IP-learned attributes and will always rely on the former, when available, to make decisions and resolve conflicts.

Profiles that are assigned to similar endpoints are further grouped into factory-defined profile groups for more efficient sorting and management within the web interface.