Discovery Mode

Discovery mode is the mode in which Neuralyzer will learn about your system.

It is the default mode when you first start the Neuralyzer device.

Time in discovery mode will be essential for Neuralyzer to be able to better understand the system, give certain standards to evaluate which are the trusted devices, what are daily activities in the system.

Which activities is suspicious, what are the risks that need to be prevented.

When in this mode:

• No violation of allowlist will be triggered.
• The time that the trusted device was in an inactive state will be learned and updated in the device policies.
• Existing connections between devices will be learned and added to the connection policies.
• Open ports and protocols on that port will also be learned and added to the device policies.

It is very important when in Discovery mode that your system is in a normal state. In addition to our predefined values based on industry standards, the knowledge learned by Neuralyzer is an indispensable piece for us to protect your system in the best way. So Neuralyzer may need at least one day to learn your network.

You can always view and adjust what Neuralyzer learns on the device policy, connection policy, device detail.