Network Discovery scans macOS computers over SSH. Enabling SSH lets the sensor run the system_profiler command, which reads hardware, operating system, and software data from the machine.
To scan a Mac, you need a user account with SSH access and Spotlight enabled for software inventory.
For remote or off-network Macs that a sensor can't scan over SSH, use IT Agent Discovery instead. The agent runs on the endpoint and sends its inventory back to your site.
Requirements
Every Mac you scan must meet these requirements:
- SSH: Remote Login (SSH) must be enabled on the Mac. Network Discovery connects over TCP 22.
- Credential: An SSH discovery credential for a user account with SSH access to the Mac. The account must have logged in locally at least once, or have sudo privileges.
- Spotlight: Spotlight must be enabled. The
system_profilercommand Network Discovery uses to read installed software doesn't return results without it.
Enable Remote Login on macOS
-
Open System Settings on the Mac. On macOS 12 and earlier, open System Preferences.
-
Go to General > Sharing.
-
Turn on Remote Login.
-
Set Allow access for to Only these users, then add the account Network Discovery will use to scan the Mac.
-
Verify that Spotlight is enabled so software data can be collected.
Next steps
- Create discovery credentials for the Macs you want to scan.
- Create a Network Discovery action to define what to scan, when, and with which credentials.