2. Function, Operation

2-2

Is it possible to detect unauthorized connections even if the monitored device has a firewall feature, of Windows XP SP2 or later, enabled?

Yes, it is possible.

The NetSkateKoban sensor monitors terminal network usage by observing DHCP and ARP packets broadcast on the Ethernet segment. In addition, the SwiMon module performs monitoring by using the MAC addresses learned on the switch ports to which the terminals are connected.

Therefore, regardless of whether firewall software is installed on the monitored device or how it is configured, the device will be detected as long as it communicates with other equipment.