7.0.8 Insight Remote Support Security White Paper

8
Email Adapter
Insight Remote Support can notify the (default and backup) device contacts via email when certain events occur. Email
notification can be configured in the Integration Adapters tab in Administrative Settings menu of the Insight RS Console.
Device contacts can be notified for any or all of the following events:
 A support case has been opened at HP for a specific event
 A support case has been closed at HP for a specific event
 A configuration collection has been sent to HP
 The Insight Remote Support application has failed
 An Insight Remote Support software update is available
 A monitored device maintenance agreement is about to expire
 A new device has been discovered
 Hosting Device capacity threshold has been reached
Insight Remote Support Device Discovery
Device Discovery is used to scan your network, or a portion of your network, and search for potential devices to be
included in Remote Device Monitoring (RDM) and the Remote Device Collections (RDC). Device Discovery uses standard
network management protocols (like Simple Network Management Protocol – SNMP and Web-based Enterprise
Management – WBEM) to identify devices connected to your network (see: Chapter 3 of the Installation and
Configuration Guide). For each device discovered on your network, the discover engine will attempt to communicate with
it using all available services (listed in table 1). The discovery will identify all possible communication methods and allow
the administrator to select the best one for the target device. Network management protocol passwords are encrypted
using Advanced Encryption Standard 128 (AES-128) and stored in the Insight Remote Support database on the Hosting
Device. These protocols must be configured in the Discovery  Credentials tab prior to discovery in order to properly
identify devices on your network (assuming you are not using HP SIM discovery to identify devices on your network). The
discovery engine can add devices the following ways.
Scan using an IP address, a list of IP addressesor range of IP addresses
This is the most restrictive method, allowing the administrator to target specific devices or a specific subnet
range for device discovery.
Scan using a Windows Domain Group
This allows the Hosting Device administrator to discover all devices in a Windows Domain. This option requires
the Window Domain administrator username and password to be configured in the discovery engine on the
hosting device.
Scan a LAN Subnet or all LAN Subnets
This allows the Windows Administrator to automatically discover all devices contained in a LAN Subnet. The
Subnet range is defined by the LAN IP/Network Mask. This can be the entire network (or networks) or any
subnetwork range within your enterprise with IP Routing enabled from the Hosting Device.
Device Discovery will scan your network for possible monitored devices using all available management protocols.
These include:
Service
Protocol/Port
Source
Destination
DCOM*
TCP/135
Hosting Device
Monitored Device
ELMC
TCP/7920
Hosting Device
Monitored Device
HPPrintDataManager
See Table 2