Supported Device List

Supported Network Hardware

Tesorion defines supported network hardware as: A combination of a SysObjectID and a supported software version. All network hardware supported by Tesorion Immunity is listed in this document, the Supported Device List, and support only applies in combination with the specific version of  Tesorion Immunity mentioned on the cover page of this document.

Network Hardware

Tesorion identifies network hardware by the System Object Identifier (SysObjectID) in the MIB. The SysObjectID can be found in the output of this command:
snmpget −v2c −c COMMUNITY −On IP_ADDRESS 1.3.6.1.2.1.1.2.0

In which COMMUNITY is an SNMP read community and IP_ADDRESS is the network hardware’s IP address.

What if the SysObjectID is not on the Supported Device List?

If your network hardware’s SysObjectID is not on the Supported Device List, it is not supported by Tesorion Immunity. In case you are using, or would like to use, network hardware which does not occur on the Supported Device List, please contact Tesorion Support to discuss the possibilities.

Network hardware without SNMP support

Some network hardware on the Supported Device List does not support SNMP. Tesorion Immunity can not automatically detect the manufacturer and model of such network hardware, based on the IP address. An extra remark in the family characteristics table will indicate this, if this is the case.

Hardware not available in the Tesorion lab

For a number of network hardware families, none of the members are available in the Tesorion lab. These families are supported, and often software versions can be tested on equivalent network hardware in the Tesorion lab. Please contact Tesorion Support for specifics.

Externally manageable

Some network hardware manufacturers provide an external (cloud) service to configure network hardware. You can indicate that a switch is externally managed when you add hardware to Tesorion Immunity. When network hardware is externally managed, Tesorion Immunity will not make any changes to the configuration of this network hardware, but answers to RADIUS requests and may reset port connections to provide network access control. Support for this feature will be indicated by the feature tag Externally manageable.

When externally managed network hardware supports SNMP, Tesorion Immunity only needs read permissions. Tesorion Immunity will never use SNMP write access for such hardware. Some hardware models can only be configured through an external service. Tesorion Immunity will never change the configuration of such hardware. An extra remark in the family characteristics table will indicate this.

Stacks of switches

Certain switch models can be used in a ’stack’ of multiple units. Some of these switch models are supported by Tesorion Immunity for use in a stack, as indicated by the feature tag Stacking. In our experience, performance issues are more likely to occur with larger stacks. Therefore, Tesorion does not recommend using stacks with over four stack member switches, although, for some switch models, two seems to be the maximum in combination with dynamic network access control.

Port security

On certain switch models Tesorion Immunity uses the resilient port security for MAC-based authentication, as indicated by the feature tag Port security. The advantage of port security is that once a client has acquired network access, it will keep access until it is revoked by Immunity, i.e. maintaining network access on the switch port does not depend on external systems.