Understanding and Analyzing Network Segments in SanerCVEM

Navigation Path: EM >> Checks >> Network Segments

Objective

To help users understand how to interpret the Network Segments section in SanerCVEM and use it for effective network visibility, segmentation analysis, and troubleshooting.

What is the Network Segments View?

The Network Segments dashboard provides a visual and tabular breakdown of all detected network segments across your environment. It helps identify how devices are distributed across IP ranges and what types of network interfaces are in use.

Key Components Explained

1. Pie Chart – Network Segment Distribution

Shows the percentage of devices in each subnet. Example: 172.17.0.0 and 172.16.0.0 each represent 50% of the networked devices.

2. Bar Chart – Network Type

Displays the type of network interface (e.g., ARPHRD_ETHER) and the number of devices using it.

3. Network Segment Table

Provides detailed information per device:
- Host Name: Device identifier (e.g., node-13)
- IP Address: Assigned IP (e.g., 172.17.0.1)
- MAC Address: Unique hardware address
- Net Mask: Subnet mask (e.g., 255.255.0.0)
- DNS Server: Local DNS resolver (e.g., 127.0.0.53)
 - DHCP/Gateway: May be empty if statically configured or not detected

Why is This Important?

Understanding network segmentation helps:
- Detect unauthorized or misconfigured devices.
- Identify subnet overlaps or segmentation gaps.
- Improve network hygiene and security posture.
 - Troubleshoot connectivity issues more effectively.

Use Cases

- Security Audits: Identify devices outside expected subnets.
- Network Planning: Visualize how devices are distributed.
 - Troubleshooting: Spot missing gateway or DNS configurations.

Screenshot

Conclusion

The Network Segments view in SanerCVEM offers a powerful way to visualize and analyze your network topology. By leveraging this feature, administrators can enhance security, optimize network performance, and ensure proper segmentation across all devices.