Why do I have duplicate assets after a third party import?

For some connectors and third party data sources, there is very little information runZero can use to match up the incoming data with your existing assets. By default, incoming third party data from most connectors will be matched by IP address if all else fails.

However, there's a limit on how long runZero will trust IP addresses. If an IP address on an asset hasn't been confirmed by a scan in more than 3 days, it won't be trusted as the only data point for matching incoming third party data, because asset IP addresses can change due to DHCP, network reconfiguration, and so on.

For this reason, it's recommended that you scan assets regularly if you want to connect them with third party data. It's also a good idea to make sure that the assets have MAC information available, which requires scanning them using an explorer on the same subnet.