# What does network detection miss if a segment is not mirrored?

Everything that happens only inside that segment. A sensor sees the traffic it receives; if a switch port is not mirrored to it and no agent runs on the hosts there, connections between devices on that segment, such as an attacker moving from a PC to a file server next to it, stay invisible. You may still see traffic that leaves the segment through a monitored point, for example to the internet or to another site, but the internal steps of an intrusion are often exactly what you need. Decide by risk: mirror the segments with servers, administration, finance, HR and production first, then the rest. Where mirroring is impractical, run the agent on the important hosts themselves. NetSenX shows which segments its sensors and agents watch, so the gaps are visible.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Incident reporting deadlines](https://netsenx.com/en/faq/reporting) · https://netsenx.com/en/faq/what-does-network-detection-miss-if-a-segment-is-not-mirrored

## Read next

- https://netsenx.com/en/nis2-incident-reporting-deadlines
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [What should an incident log contain for a NIS2 audit?](https://netsenx.com/en/faq/what-should-an-incident-log-contain-for-a-nis2-audit)
- [How do we show an auditor what we decided on each security alert?](https://netsenx.com/en/faq/how-do-we-show-an-auditor-what-we-decided-on-each-alert)
- [How long must we keep security incident records?](https://netsenx.com/en/faq/how-long-must-we-keep-security-incident-records)
- [Can a network map be generated automatically from traffic for an auditor?](https://netsenx.com/en/faq/can-a-network-map-be-generated-automatically-for-an-auditor)
- [Must we document data breaches that we decide not to report?](https://netsenx.com/en/faq/must-we-document-data-breaches-we-do-not-report)