Advanced options

The Advanced Options section of the data processing configuration page contains additional settings for several of Endpoint Analytics’ specialized features.

Instant Lookup

The Instant Lookup feature enables the system to perform on-the-fly DNS or Active Directory queries to collect supplemental information right as a client connects instead of relying on a polling cycle to capture data. Discovered endpoints will immediately trigger an immediate DNS or AD lookup if there are no others in the queue. This results in improved speed and accuracy when assigning Profiles to newly discovered endpoints.

This feature requires Plixer Endpoint Analytics to receive DHCP request packets (via a SPAN of DHCP server traffic or IP Helper configured on routers) and will initially rely on on an endpoint’s DHCP hostname to query DNS and/or DNS servers.

The following settings are used to configure Instant Lookup:

  • Active Directory Query Queue - sets the amount of time that an endpoint will wait in queue before being released for AD Instant Lookup (default: 15 seconds)

  • DNS Query Queue - sets the amount of time that an endpoint will wait in queue before being released for DNS Instant Lookup (default: 15 seconds)

  • DHCP Client Vendor Inclusion - list of DHCP client vendors (in regular expressions) whose endpoints will be subject to Instant Lookup (click the Default DHCP Client Vendor Inclusion List button to revert to the default list)

  • Bypass DHCP Client Vendor Inclusion List - enables DNS-based Instant Lookup for all client vendors (disabled by default)