Active monitoring works by sending test traffic into the network and polling endpoints with which it comes into contact. By sending packets directly to endpoints, active scanning can be faster in collecting data, but this also increases the risk of endpoint malfunction by pushing incompatible queries to them or saturating smaller networks with traffic.
Want to learn more about how the Claroty Platform can empower your CPS cybersecurity journey?