ExtremeCloud IQ Site Engine (XIQ-SE) key terms

An on-premises network management platform that discovers, maps, configures, monitors, and secures wired and wireless infrastructure, and can be paired with the cloud ExtremeCloud IQ tenant for unified visibility.

The on-premises service component that establishes an outbound secure connection to the ExtremeCloud IQ cloud tenant, enabling inventory, client, and alarm data to be shared without inbound firewall openings.

A logical grouping of network devices and subnets inside XIQ-SE that scopes discovery, policies, access control roles, maps, and reporting so administrators can delegate management per location or business unit.

A container used to organize managed devices for bulk configuration, firmware deployment, policy assignment, and reporting; membership can be static or dynamically populated by rules such as device type or subnet.

A saved set of parameters, including IP ranges, subnets, SNMP credentials, and protocols, that tells XIQ-SE where and how to scan the network for manageable devices.

A stored combination of SNMP version, community strings or v3 user credentials, and ports that XIQ-SE offers when polling devices during discovery and monitoring.

The process of moving a discovered device into managed state, which may include applying a device profile, pushing configuration, and registering the device for ongoing monitoring and firmware management.

A template of configuration settings and credentials applied to devices that match defined criteria, automating consistent provisioning of management, SNMP, syslog, and other baseline parameters.

An automated deployment method where a factory-default device contacts a provisioning service, receives its configuration and firmware, and joins management without manual console setup.

A comparison of each managed device's running firmware against the version defined as the standard for its group, flagging out-of-date devices so upgrades can be scheduled and tracked.

An automatically generated, link-aware diagram of discovered devices and their interconnections, built from discovery data and neighbor protocols, and used to visualize paths and troubleshoot connectivity.

A vendor-neutral neighbor discovery protocol whose advertisements XIQ-SE reads to infer physical links and build accurate topology maps between switches, routers, and access points.

A named set of network access permissions and VLAN or policy assignments that is applied to users or devices after authentication, typically through Control or NAC policy rules.

The XIQ-SE network access control capability that authenticates endpoints, evaluates them against policy, and assigns roles or remediation actions, supporting both wired and wireless access.

A rule set that evaluates conditions such as user identity, device type, location, or authentication result, and then applies an action like role assignment, VLAN change, or traffic treatment.

Extreme's network virtualization architecture that creates a resilient, automated switched and wireless fabric, with XIQ-SE used to provision and manage fabric nodes and their roles.

A notification generated when a monitored condition crosses a defined threshold or a fault is detected, carrying severity, source device, and details for operator response and escalation.

A recorded occurrence such as a syslog message, trap, or state change collected from devices; events are stored for search and can trigger alarms or automated actions when matched by rules.

A configurable limit on a monitored metric, such as CPU utilization or link error rate, that determines when XIQ-SE raises, escalates, or clears an alarm.

The periodic collection of status and performance data from managed devices using SNMP or other protocols, feeding dashboards, graphs, and threshold-based alarm evaluation.

A standard logging protocol used by network devices to send event messages to XIQ-SE, where they are stored, searched, and correlated with alarms and reports.

A scheduled or on-demand output that summarizes collected data such as inventory, availability, client counts, or compliance, exportable for audits and capacity planning.

An identity in XIQ-SE with assigned credentials, group membership, and authorization scope that determines which sites, devices, and administrative functions the person can access.

An authorization model where permissions are granted to roles rather than individuals, and users inherit those permissions through group or role assignment, simplifying administration and least-privilege enforcement.

An external identity source such as RADIUS, LDAP, or Active Directory that XIQ-SE queries to validate administrator or endpoint credentials instead of relying solely on local accounts.

The process of exporting XIQ-SE configuration and database state to a file and later reinstating it, used for disaster recovery, migration, and pre-upgrade safety.

A deployment with paired XIQ-SE servers that replicate state and monitor each other so services fail over automatically, reducing downtime from hardware or software failure.

The entitlement model that governs which XIQ-SE features and how many devices or clients are permitted, requiring valid license files or keys to be installed and kept current.

The controlled replacement of the XIQ-SE software with a newer release, typically requiring a backup, compatibility review, and staged rollout to minimize service disruption.

The first-run setup of XIQ-SE after installation, covering network addressing, administrator credentials, licensing, time sources, and initial discovery settings.

Built-in tools such as ping, traceroute, log inspection, and device health checks that administrators run from XIQ-SE to isolate connectivity or configuration problems.

The use of scheduled workflows or scripts in XIQ-SE to perform repeatable tasks such as configuration pushes, compliance checks, and remediation without manual steps.

The capability to onboard, configure, and monitor Extreme wireless controllers and access points from XIQ-SE, including SSID, radio, and client visibility.