Find Device
Endpoint location using live fleet evidence and MAC-first correlation.
Search identities
Find Device accepts MAC, DHCP/static IP, hostname, UNP username/profile and VLAN search modes. MAC is the primary endpoint identity used for cross-source correlation.
IP search plan
IP searches correlate ARP, MAC forwarding and UNP evidence in one fleet pass. When a static IP has no neighbor entry, the workflow can perform a safe active probe and ARP retry.
Candidate enrichment
MAC and UNP searches use staged enrichment so expensive data is queried only where it adds evidence. LLDP is collected only on candidate switches to distinguish physical edge ports from upstream observations.
Correlation safety
Last-known location
The database stores only the latest verified location for each MAC, not a historical time series.
Identity correlation and confidence
MAC address is the primary endpoint identity. IP searches correlate ARP, forwarding and UNP evidence and may use a safe active probe followed by an ARP retry when a static address has no current neighbor entry. Expensive tables and LLDP enrichment are queried only where they add evidence.
Records are never merged merely because they share a port; MAC identity is required for cross-source correlation. This prevents multi-MAC access ports from mixing usernames, addresses and profiles. UNP Profile ID and VLAN remain distinct fields.
Last-known location
The database stores only the latest verified location per MAC, not a full time series. When live evidence is unavailable, Portivo can show this bounded historical context while clearly distinguishing it from a current physical location.