📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Network Diagram

See everything on a client's office network, from the internet connection down to printers, and get told when something goes offline.

Open Network Diagram in your console

Where to find it
Network › LAN Scan
Who can use it
Anyone who can see the page; the selected company must have LAN scanning in its plan. Documenting ports needs a role that can change settings, such as an administrator
For
Everyone
Plan
LAN Scan / Asset Discovery (add-on, or included in Complete). See pricing
Feature
LAN and WAN monitoring for breaches and frustrations

What the page is for

Network Diagram is a page in the Lavawall® console, in the Network area. Lavawall is the RMM, security, and compliance platform from ThreeShield, built and hosted in Canada. About this feature.

The Network Diagram uses computers running the Lavawall agent as scanners to discover the other devices on the local network: routers, switches, access points, printers, phones and anything else that answers. It draws them as a map from the internet, with one card for each site (each internet connection), its gateways, and the network segments behind them, and marks which devices are managed by Lavawall. Segments with nothing on them, such as a laptop's home or hotel network, are listed under the map instead of drawn.

You can write down which switch port each device is plugged into, and print the whole network as a traditional network drawing on a plotter or large paper, or save it as an SVG file.

For each device it shows the IP address, type, open ports and, where the device supports SNMP, details such as interfaces, printer supply levels and environment sensors. Open vulnerabilities found on network devices are listed, as are printers with low supplies.

You can also turn on uptime monitoring for any device or for a URL or IP address. Lavawall then checks it on a schedule, records outages with the reason, shows an uptime heat map, and raises a notification when it goes down.

What you see

The Network Diagram page, with Scanner & Monitoring Settings, Monitoring Reports & Uptime Heat Map, the summary counts with the PDF, CSV, Plot view and Monitoring buttons, and the Network Topology numbered 1 to 4.
The Network Diagram page. Numbers match the list below (1 to 4 are in this picture). Names and data are examples. The map, a device's ports, the plot view and the lists below the map are shown in the next pictures.
  1. Scanner & Monitoring Settings: which computers scan, how often, alert thresholds, SNMP communities and which locations may run monitoring.
  2. Monitoring Reports & Uptime Heat Map: monitored, online, offline and outage counts, an uptime heat map, and an outage list, for 24 hours to 90 days.
  3. Summary: Total, Online, Managed, Network, Printers and Vulns counts, with PDF, CSV, Plot view and Monitoring buttons.
  4. Network Topology: the map from the Internet to one card per site. Each site shows its WAN address, its gateways and its network segments with their switches and devices. Below the sites are Other routers, Remote Devices - No ARP (devices reached through a router), devices with no segment, and a collapsed list of segments with no devices.
  5. Open Vulnerabilities, Printer Supplies and Devices: lists below the map.
  6. Device Details: click a device to see basic information, network, open ports, SNMP information, vulnerabilities, printer supplies, network interfaces, environment sensors, and Ports and connections.
The Network Topology map (4): Sites (3), then the first site's card with its WAN address, its firewall, and the Office LAN segment with two switches, two access points and a row of computers, printers, cameras and other devices, each with a name, address, maker and status dot, followed by the Voice segment with its phones.
Network Topology (4): one card for each site, with its WAN address, gateways and segments. Names and addresses are examples.
The three lists below the map, each numbered 5: Open Vulnerabilities with a severity, device, finding and address on each card, Printer Supplies with a level bar for each toner or part, and Devices with Device, IP and Type columns and a filter box.
Open Vulnerabilities, Printer Supplies and Devices (5). Names and addresses are examples.
A switch's device window (6) with Ports and connections open for editing: rows of Port, Connected to, VLAN and Notes, such as Gi0/2 connected to PC-01 on VLAN 10 and Gi0/24 connected to Patch panel B-14, with Add a port, Add a range, Save ports and Cancel buttons.
Ports and connections in a switch's device window (6). Names and addresses are examples.
Plot view: a toolbar with Paper, Orientation, Labels and Symbols choices, Routed / remote devices, zoom, Print and Download SVG, above a 36 by 24 inch sheet showing the network as a tree from the Internet through each site's WAN connection and gateway to its segments, with a legend and a title block.
Plot view: the whole network on one sheet, ready to print or save as SVG. Names are examples.
A close-up of the plot: a firewall symbol above the Office LAN core switch, a second switch with eight computers around it and each line labelled with its switch port, such as Gi0/2 and Gi0/9, a printer on port Gi1/0/10, and a group of devices whose connection is not documented.
A close-up of the plot, with standard network symbols and the documented switch ports on the lines. Names and addresses are examples.

How to use Network Diagram

How to start scanning a network

  1. Select the company in the company picker.
  2. Open Scanner & Monitoring Settings. Leave Auto-assign ARP scanning on to let Lavawall choose scanners, or turn it off and tick the computers under Allowed scanners (manual assignment).
  3. Turn on Auto-assign subnet scanning if you also want whole subnets scanned.
  4. Under Intervals & Thresholds, set Consumable Alert, Monitor Check, ARP Scan and Subnet Scan.
  5. Enter your SNMP Communities (comma-separated) so printers and switches can be read.
  6. Click Save Settings. Devices appear after the next scan.

How to monitor a device for outages

  1. Click Monitoring.
  2. In Device Monitoring, find the device with Filter devices..., choose what to monitor (for example ping or a port), set Outage and Re-ntfy (re-notify) times, and tick On.
  3. For a web port, add HTTP Checks, including a string that must appear on the page.
  4. Use Enable Selected or Disable Selected for several devices at once.
  5. Click Save Device Settings.
The Monitoring and Alert Settings window. Device Monitoring lists each device with its address, what to monitor (ping or ports), Outage, Re-ntfy and Sup% times, HTTP Checks and an On box, with Enable Selected, Disable Selected and Save Device Settings. URL / IP Endpoints lists a website with its target, ports, times, expected HTTP status and page text, and Ext, with Add and Save Endpoints.
Monitoring & Alert Settings: devices, then websites and IP addresses. Names are examples.

How to monitor a website or IP address

  1. Click Monitoring, then Add under URL / IP Endpoints.
  2. Enter a Label and Target (URL/IP), choose what to monitor and the Outage and Re-ntfy times.
  3. Tick Ext to allow any scanner, including Lavawall's servers on the internet, to check it.
  4. Click Save Endpoints.

How to review uptime

  1. Expand Monitoring Reports & Uptime Heat Map.
  2. Choose a period: 24 hours, 7 days, 14 days, 30 days or 90 days.
  3. Read the outage list: System, Started, Ended, Duration, Status (Ongoing or Resolved) and Why it was down. A source badge shows whether the check came from the Internet or the office LAN. The newest 10 outages are shown first; click Show 25 more to load older ones.
  4. If a web application firewall is blocking Lavawall's checks, click How to allow for that service for the steps.

How to document switch ports

  1. Click the switch, router or other device on the map.
  2. Under Ports and connections, click Add ports (or Edit ports if some are written down already).
  3. Enter the Port name or number as printed on the device, for example Gi1/0/24 or 12. Use Add a range… to add several at once, for example Gi0/1-48.
  4. In Connected to, start typing a device name or address and pick it from the list, or type anything else, such as Patch panel B-14.
  5. Add the VLAN and Notes if you like, then click Save ports.

The device on the other end shows Plugged into with the switch and port, and the plot view hangs it under that switch with the port on the line.

How to print a network drawing

  1. Click Plot view.
  2. Choose the Paper (Letter to ARCH E, A3 to A0, or a 24 or 36 inch roll) and the Orientation.
  3. Choose Labels: Name and IP, or Name, IP, make/model, MAC.
  4. Choose Symbols: Standard (colour), or Outline (saves ink) for a plotter.
  5. Untick Routed / remote devices to leave out devices reached through a router.
  6. Click Print and choose your plotter or printer, or click Download SVG to open the drawing in Visio, Illustrator or AutoCAD, or send it to a print shop.

How to export the network

  1. Click PDF for a report or CSV for the device list.
  2. Click Show All Devices to show every device on the map instead of the first 50 per group.

Tips

  • A small Lavawall badge on a device means it is managed by the Lavawall agent.
  • An exclamation mark on a printer means low supplies; the Consumable Alert percentage sets when that happens.
  • Settings open automatically when nothing has been discovered or configured yet.
  • You can open Scanner & Monitoring Settings, Monitoring and Plot view while the rest of the map is still loading.
  • Each site card can be collapsed by clicking its WAN line.
  • When the plot view says names print very small, choose larger paper or a roll.
  • A web page title such as "403 Forbidden" is never used as a device's name; the device shows its address instead.
  • In a high-availability setup, use Allowed WAN IPs and Allowed Gateways (or the auto-fill button) so only scanners at the right sites run monitoring. Accept monitoring from all locations turns that restriction off.

Troubleshooting

"Please select a company from the dropdown above to view the network diagram."
Choose a single company.
"LAN Scan is not part of this company's plan…"
Choose another company, or add LAN scanning to this company's plan.
A segment is missing from the map.
Segments with no devices are hidden. Open segments with no devices (hidden) under the map to see them.
There's no Add ports or Edit ports button.
Documenting ports needs a role that can change settings, such as an administrator.
"No monitored devices found."
Turn on monitoring with the Monitoring button.
Checks fail but the site works.
A web application firewall may be answering Lavawall's checks. Use How to allow in the monitoring report.

Task guides that use this page

Still need help?

Search the support centre, or contact our support team and tell us which page you were on:

Names, companies, devices and figures in the pictures are examples. Other product and company names are trademarks of their respective owners.

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.