The Fingerbank Collector allows network and security vendors to easily integrate advanced device fingerprinting and profiling technologies within their product. Firewalls, access points, WiFi controllers, switches, proxies and other solutions can integrate the Fingerbank Collector in order to accurately identify endpoints on networks. These solutions can then apply network and security policies based on the device type. With the proliferation of IoT devices, the Fingerbank Collector is essential to increase awareness and thus, security.
The Fingerbank Collector is a self-contained software solution. It does not have any dependencies and has a very low memory and CPU footprint. It can also run on many architectures (x86, amd64, ARM, MIPS, etc.) and operating systems (Linux, BSD, Windows, Android, Mac OS X, Solaris, etc.). When started, the Fingerbank Collector will capture multiple protocols. Among them, there are:
DHCP v4 and v6
DNS and mDNS
HTTP and HTTPS
... and more. The Fingerbank Collector keeps part of the data it found interesting (like MAC vendor, DHCP v4 fingerprint, TCP fingerprint, DNS OS update lists, etc.) in-memory. Then, the Fingerbank Collector can be queried over HTTP using a RESTful API in order to get endpoint details based on the IP or MAC address.
The following high-level diagram demonstrates how the Fingerbank Collector can be integrated in your solutions:
The Fingerbank Collector takes care of all the data discovery and collection process, which is sometimes a tedious job. An other big advantage is that it is always using the latest and greatest data from the Fingerbank Cloud version, which is being improved every single second by thousands of PacketFence deployments worldwide.
Moreover, with the Fingerbank Collector you don't need to have the SQLite database sitting on your solution, query it yourself and manage updates. You also don't need to query the Fingerbank Cloud version yourself - the Fingerbank Collector will take care of everything for you.