For Small-Sized Enterprise

To ensure the best asset visibility, deploy a Network Passive Sensor closer to the client access, at the distribution switch, instead of deploying the passive sensor at the core. Deployments closer to access enable the Network Passive Sensor to see traffic within the client access networks, more specifically, enable the passive sensor to see MACs within the broadcast domain of a single distribution switch. Deployments of Network Passive Sensor at the core will only see the router's MAC and have limited visibility to the traffic within client access networks, resulting in less complete discovery.

The diagram below shows a typical deployment of network passive sensors in a small-sized enterprise. Network Passive Sensors are deployed at the distribution layer in the same network.