Skip to main content

Asset Discovery Sources

The Corsha mIDP integrates with asset discovery platforms to automatically import and maintain your machine inventory. These integrations eliminate manual machine identity creation by synchronizing discovered assets from OT/IoT visibility platforms.

Available Integrations​

Corsha integrates with leading OT/ICS asset discovery platforms to automatically import discovered devices as machine identities:

  • Claroty CTD - Continuous Threat Detection for OT and IoT environments
  • Dragos Platform - Industrial control system (ICS) asset discovery and threat detection

Both integrations provide:

  • Automated import of discovered OT/ICS/IoT devices and systems
  • Continuous synchronization of asset inventory
  • Attribute mapping for device classification and grouping
  • Automated machine identity grouping based on identity source

How Asset Discovery Integrations Work​

Asset discovery integrations follow a common pattern:

  1. Continuous Discovery: The asset discovery platform (Claroty, Dragos) monitors your network to discover and profile devices
  2. API Synchronization: Corsha mIDP connects via API to retrieve discovered assets
  3. Machine Identity Creation: Each discovered asset becomes a machine identity in Corsha
  4. Attribute Mapping: Device attributes are mapped to machine identity properties
  5. Automatic Grouping: Machines can be automatically assigned to groups based on discovery platform attributes
  6. Ongoing Updates: Regular synchronization keeps the inventory current

Benefits​

Automated Inventory Management:

  • Eliminate manual machine identity creation for discovered devices
  • Maintain synchronized inventory across security platforms
  • Reduce operational overhead for OT asset management

Enhanced Visibility:

  • Leverage specialized OT discovery capabilities of platforms like Claroty and Dragos
  • Combine asset discovery with zero-trust access control
  • Unified view of IT and OT assets in a single platform

Faster Deployment:

  • Rapidly populate Corsha with existing asset inventory
  • Accelerate time to policy enforcement
  • Import historical device data from discovery platforms

Continuous Accuracy:

  • Asset inventory automatically updates as new devices are discovered
  • Attribute changes sync to maintain current device information

Configuration​

Integration Setup

Contact your Corsha Technical Point of Contact (TPOC) for assistance configuring asset discovery integrations.

Best Practices​

  1. Start with Observe-Only Mode: After importing assets, deploy Gatekeepers in Observe-Only mode to understand communication patterns before enforcement

  2. Use Discovery Attributes for Grouping: Leverage device classification from discovery platforms to automatically organize machines into logical groups

  3. Synchronize Regularly: Configure frequent synchronization to ensure Corsha inventory reflects current environment

  4. Combine with Manual Identities: Import from discovery platforms for OT devices while manually managing IT systems or devices outside discovery scope

  5. Validate Imported Data: Review imported machine identities to ensure accuracy before creating policies

  6. Map Business Context: Use location and functional data from discovery platforms to organize machines by business context