--- title: "Choose a Network Discovery sensor | Lansweeper Platform" slug: "choose-your-sensor" description: "Compare Lansweeper Platform Network Discovery sensors. See when to use the IT and OT sensor or the traffic sensor, which also records asset connections." status: "update" updated: 2026-10-14T16:09:15Z published: 2026-10-14T16:09:15Z canonical: "docs.lansweeper.com/choose-your-sensor" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.lansweeper.com/llms.txt > Use this file to discover all available pages before exploring further. # Choose your sensor Network Discovery sensors all connect to the same hub. Which one you install depends on what you need to see. ## Compare the sensors | Consideration | IT and OT sensor | Traffic sensor | | --- | --- | --- | | What it discovers | Assets within the subnets and VLANs where you deploy it | Assets across subnets and VLANs, from the traffic they generate | | How it collects data | Actively scans the IP ranges you define, and passively detects assets on the segments it can see when [network visibility](/docs/configure-network-visibility) is enabled | Passively reads a copy of your network traffic | | Credentials | Needed for full asset detail | Not used | | Scope you define | IP ranges, subnets, or Active Directory OUs | None | | Traffic mirroring | Not needed | Strongly recommended, using SPAN, RSPAN, ERSPAN, a network TAP, or a packet broker. You can also send NetFlow records from your switches or routers (early access). Without a mirrored feed the sensor sees only broadcast traffic, which covers a limited subset of the local network. | | Asset connections | Not recorded | Internal connections and connections to external services (closed beta) | | Operating systems | Windows, Linux, macOS | Windows, Linux | ## When to use the IT and OT sensor Use it when you want depth. Given credentials, it authenticates to devices and returns the operating system, hardware, installed software, and users. It also maps subnets and switch ports, which is what builds your network topology diagrams. Deploy one in each segment you want to scan. ## When to use the traffic sensor Use the traffic sensor when you want coverage. It finds anything that communicates, including devices you had no reason to look for, with no credentials and no scope to define. Placing it at a choke point such as a core or distribution switch covers traffic from many segments at once. It reads a copy of your network traffic. [Set up traffic collection](/docs/set-up-traffic-collection) covers the mirroring methods and where to place a sensor. ### What the traffic sensor records The traffic sensor also records how your assets communicate. After you install it, the sensor inspects network traffic and records: - Connections between your assets, in both directions: the connections each asset sends and the ones it receives. - Connections from your assets to external services, such as SaaS applications. The sensor sends this connection data through the hub to your site. You can review it on the **Connections** tab of an asset summary. See [View internal connections](/docs/view-internal-connections) and [View external connections](/docs/view-external-connections). Asset connections are in closed beta Asset connections are in closed beta. To request access, sign up for the [Lansweeper beta program](https://www.lansweeper.com/product/beta/). ### How connection data is protected - **Allowlist only**: Lansweeper stores and shows only connections to a curated list of well-known corporate applications, such as common SaaS, cloud, and AI services. Connections to other destinations don't appear in your inventory or the API, so an employee's personal browsing isn't surfaced. - **Minimal retention**: Raw traffic data is kept only as long as it's needed to build your inventory, then deleted. - **Separate access control**: Viewing connections requires the **View asset connections** permission, which is separate from the rest of the inventory. Grant it only to the roles that need it. For the full details, see the [Lansweeper Traffic Sensor Trust Center](https://www.lansweeper.com/about/trust/traffic-sensor/) and [Privacy by design](/docs/discover-assets-with-the-traffic-sensor#privacy-by-design). ## Run multiple sensors Many environments run multiple sensors because they answer different questions. The traffic sensor tells you what's on the network and how it communicates. The IT and OT sensor tells you what each asset is, in detail. A common pattern is to use the traffic sensor to spot IP ranges holding assets nothing has scanned yet, then deploy IT and OT sensors to cover those ranges. ## Next steps Whichever sensor you pick, start with the [Discovery hub requirements](/docs/discovery-hub-requirements). For the IT and OT sensor: 1. Check the [IT and OT sensor requirements](/docs/discovery-hub-and-sensor-requirements). 2. Install the sensor and hub on [Windows](/docs/install-network-discovery-windows), [Linux](/docs/install-network-discovery-linux), or [macOS](/docs/install-network-discovery-macos). For the traffic sensor: 1. Check the [Traffic sensor requirements](/docs/traffic-sensor-requirements). 2. [Set up traffic collection](/docs/set-up-traffic-collection) on your network. 3. Install it on [Linux](/docs/install-the-traffic-sensor) or [Windows](/docs/install-the-traffic-sensor-windows). The Lansweeper Platform capability that discovers IP-connected devices on your network, including IT, OT, and IoT devices, and keeps their data up to date in your site. Network Discovery is made up of the hub, the IT sensor, the OT sensor, and the traffic sensor. The IT Agent and Cloud Discovery are separate discovery methods. The Network Discovery component that every sensor connects to. The hub holds the sensor configuration, collects the data the sensors gather, and syncs it to your Lansweeper Platform site. A Network Discovery sensor that passively analyzes network packet traffic without credentials. It also detects devices outside your configured network that communicate with internal systems.