I see that snmp queries can be used to discover devices for IOT using xsoar engines. I also see that it uses cdp lldp and gathers arp and mac data. https://docs.paloaltonetworks.com/iot/iot-security-integration/network-management/integrate-iot-security-with-network-switches-for-snmp-discovery Specifically in the documentation: The XSOAR engine also queries the entry switch for the IP addresses of neighboring switches on the network. It collects device information from them next and also gets a list of their neighboring switches as well. XSOAR continues collecting device information and learning about other switches until it has queried them all. What I don't understand is what happens when this engine hits a L3 boundary. Does the discovery continue past/through an MPLS network, or is it simple snmp queries, and will it fail past a routed MPLS connection, not discovering other networks/routers?
... View more