How do I turn on the NetSenX crypto inventory (NQCI)?
NQCI is visible on every plan as a preview, active from the Pro plan, and it needs the packet-capture sensor, which is off by default. To use it, you need two things. First, a Pro, Business or Enterprise plan. Second, an agent that captures packets: either a Linux agent with packet capture switched on, or an agent on a host connected to a SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it. or TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. port. The basic macOS mode does not see TLSTLS: Transport Layer Security. The encryption that protects most internet traffic, such as HTTPS. handshakes, so it cannot feed the inventory. Once it runs, NQCI shows which connections crossing the monitored segment use quantum-vulnerable key exchange and which already use hybrid post-quantum key exchange, plus the SSH server versions it sees. It is still in preview. It does not see cryptography inside applications or on disk, it does not migrate anything, and it does not do your compliance work for you; it gives you a starting inventory from the network.
Read next
Related questions
Terms used here
- SPAN (switch port analyser)
- A switch setting that sends a copy of network traffic to one port, where a sensor can watch it.
- TAP (test access point)
- A small device that copies the traffic on a network cable for a sensor to watch.
- TLS (Transport Layer Security)
- The encryption that protects most internet traffic, such as HTTPS.