Overview#
Device Inventory Service (component of BeyondCorp) is an inventory is the primary prerequisite to any inventory-based Access Control. |
In BeyondCorp, the generic term "device" can refer to either a physical device or a host, depending on the configuration of the access policy. Depending on your environment and Security Policy, you may need to make a concerted effort to distinguish between devices and hosts.
- device is a collection of physical or virtual components that act as a computer
- host is a snapshot of the state of a device at a given point in time.
For example, a device might be a laptop or a Mobile Device, while a host would be the specifics of the Operating System and software running on that device.
Device Inventory Service contains most current data on the devices, the associated hosts, which includes the last update from the Trust Inferer with information and Trust Tier decisions for both.
Generally the Device Inventory Service is the Authoritative Entity for any Device or Resource as encountered by the Organizational Entity.