Device Onboarding

SAMURAI Networks is agentless: each platform connects over its native API or SSH with a read-only / least-privilege account. It never makes configuration changes; it polls and reads. SSH device commands are restricted to show.

After adding a device, SAMURAI Networks runs an initial sync and then re-syncs on a schedule (configurable in Settings). For what each platform exposes once connected, see the per-vendor Device Panels.

Network access

All device traffic is outbound from the SAMURAI Networks server: it polls each device over the device’s management API or SSH. Open each platform’s management port from the server to the device. Vendor defaults are shown below; adjust if you have changed them. (Inbound syslog ingestion is also available: enable the syslog listener under Settings → Logging.)

If the server cannot reach a management subnet directly (segmented networks, DMZ hosts), route that traffic through a SOCKS5 gateway instead of opening a direct path; see Outbound Proxy.

Devices on a non-default SSH port can be added as address:port; the explicit port is also used by the reachability probe.

Credentials are stored encrypted at rest (AES-256-GCM) and used read-only. Grant the account only the access listed above; SAMURAI Networks never needs write or configuration rights.