Create pending processes classifiers for local connections

By default, Discovery does not create pending process classifier records for processes that communicate with one another on the same host.

About this task

For example, if Discovery finds process A connecting to a port on the local host and another process B listening on the same port of the same local host, these two processes are considered a local connection.

To have Discovery create pending process classifiers for local connections:

Procedure

  1. Navigate to Discovery > Properties.
  2. For Map local connections for pending process classifier, select Yes.
    Map Local Connections
  3. Click Save.
    Note: This property only affects pending process classifiers. Discovery always applies existing process classifications if their triggering conditions are met.