Nozomi Networks
Enriching OT and IT asset visibility in Nozomi Vantage with public-IP FQDN enrichment data from DNS Reverse Lookup for Public Nodes.
DNS Reverse Lookup for Public Nodes is a utility that enriches public IP nodes with Fully Qualified Domain Name (FQDN) information by performing reverse DNS lookups. By integrating DNS Reverse Lookup for Public Nodes with Nozomi Vantage, security teams gain a consolidated view of managed assets across IT and OT environments — importing public-IP FQDN enrichment data directly into Vantage. This enriches the asset registry with authoritative data from the Nozomi Networks management plane, accelerating incident investigation, reducing blind spots in critical infrastructure environments and enabling analysts to correlate dns enrichment telemetry with OT network observations without switching consoles.
Features
Importer Data Types
Asset Details Enrichment and Create New in Vantage
Joint Use Cases
Correlating Nozomi Networks signals with OT network alerts
Closing asset inventory gaps across IT and OT
Enriching public-facing OT-adjacent assets with FQDN context
Integration Prerequesites
- Active Nozomi Vantage tenant with the connector-configuration role assigned to the administering account
- Outbound DNS resolution available from the Vantage tenant to the chosen public DNS resolver (Google, Cloudflare or custom)
- Consistent hostname, IP or MAC addressing between DNS Reverse Lookup for Public Nodes-recorded assets and Vantage-observed assets to enable accurate asset correlation and deduplication
- Outbound network connectivity from Vantage to the source-tool API endpoint over HTTPS (this prerequisite is a deployment placeholder and may be adjusted to match your environment)
- Outbound network connectivity from Vantage to the source-tool API endpoint over HTTPS (this prerequisite is a deployment placeholder and may be adjusted to match your environment)
