Cigent Technology RECON SENTINEL, User Manual

Page: 16 / 50

www.reconsentinel.com
Page 16 of 50
Device Status Legends
Active Defense Countermeasures (ADC)
Active Defense Countermeasures (ADC) allow the Recon Sentinel to “disrupt or block” internet
access to a device. When enabled, blocking is automatically performed for unknown devices
detected on your network or trusted devices that exhibit dangerous behavior. To protect your
network, the blocked devices will not have access to the internet until you resolve the issue
with the device.
Below is a table illustrating the various connection permissions allowed for all devices detected
to your network:
Device
Type
ADC
Status
Block Button
Status
Is Device
Blocked??
Unknown
Device
Enabled
Blocked Yes
Unblocked Yes
Disabled
Blocked Yes
Unblocked No
Trusted
Device
(Attacking)
Enabled
Blocked Yes
Unblocked Yes
Disabled
Blocked Yes
Unblocked No
Trusted
Device
(Not Attacking)
Enabled
Blocked Yes
Unblocked No
Disabled
Blocked Yes
Unblocked No
Health Status Legend
The Health Status Legend shows the various icons used for each status that a Recon Sentinel
device may be in:
•
The Critical icon is used to show that a critical event has occurred, such as new
devices and/or attacks that are detected
•
The Warning icon is used to show that potentially dangerous activity was detected,
such as Network Scans
• The OK icon is used to show that no issues have been detected and that the
network is currently protected
• The Offline icon is used to show that the Recon Sentinel is offline due to no Internet
connectivity or no power
• The
Busy
icon is used to show that the Recon Sentinel is processing a user-issued
command, such as completing registration, rebooting, or finding a device using SONAR