ManageEngine OpUtils is a network monitoring and management software designed for IT administrators, network engineers, and NOC teams in mid-size to large enterprises. It provides a unified platform for IP address management (IPAM) and switch port mapping (SPM), offering deep visibility into network resource allocation, topology, and device connectivity.

The software automates discovery, scanning, and monitoring processes, helping network teams maintain accurate IP records, manage switch port usage, detect anomalies, and troubleshoot network issues in real time.

With support for both IPv4 and IPv6, and tools for DHCP integration, rogue device detection, bandwidth monitoring, and more, OpUtils simplifies core network operations through a web-based interface.

What are the main features of ManageEngine OpUtils?

Real-time IP address management (IPAM)

OpUtils provides detailed control and visualization of IP address spaces across complex networks. Through automated subnet discovery and scanning, it identifies used, available, and conflicted IPs in real time. Admins can define scanning intervals, view subnet utilization trends, and allocate or reclaim addresses using integrated request workflows.

This module supports both IPv4 and IPv6 and integrates with DHCP servers to track lease expirations, scope utilization, and address distribution. A built-in IP request tool with approval workflows ensures that IP assignment processes remain structured and auditable. Role-Based Access Control (RBAC) and Active Directory (AD) integration enforce strict access policies.

• Scheduled and on-demand subnet scanning with visual subnet hierarchy
• Status updates for each IP (used, transient, available, excluded, reserved)
• Graphical dashboards showing IP utilization patterns and subnet health
• DHCP scope monitoring with support for major vendors
• IP request portal with custom workflows and approval stages
• Access controls tied to AD groups and organizational roles

Switch port mapping (SPM)

The Switch Port Mapper module helps IT teams maintain an accurate view of physical network connectivity by mapping switch ports to connected devices. OpUtils uses SNMP to retrieve information from managed switches and correlates this data with IP and MAC addresses, device names, and user identities.

• Auto-discovery of switches and port-device associations
• Real-time mapping of IP, MAC, and VLAN information to specific ports
• Identification of inactive, unresponsive, or overutilized ports
• Bulk management actions such as disabling unused ports
• Port-level history to trace device connection timelines

Rogue device detection and MAC address filtering

OpUtils enhances network security by continuously scanning the LAN for unauthorized or unknown devices. The rogue detection module compares discovered devices against a trusted device list and flags any deviations. Administrators can label devices as "trusted," "guest," or "rogue," and define alerting and remediation policies accordingly.

MAC address filters further tighten network access control by ensuring only whitelisted devices can be assigned IPs or connected through critical ports. Integration with AD allows organizations to correlate device usage with user identity.

• Continuous network scans for unknown devices
• Customizable alerts for new or unauthorized devices
• Categorization and manual override of device trust status
• MAC filtering to block or monitor specific hardware identifiers
• Reporting on device entry/exit times and connection paths

Integrated IP and port scanners

OpUtils includes built-in IP and port scanning tools that provide quick visibility into host availability and open service ports across network segments. These scanners are useful for vulnerability analysis, service discovery, and policy enforcement.

• Fast IP discovery to identify live devices in real time
• Port scanning to list open/closed/filtered ports per host
• Identification of unexpected or unauthorized services
• Exportable reports for audit or inventory purposes
• Integration with other OpUtils modules for cross-referencing

Wake on LAN (WoL)

OpUtils supports Wake on LAN, allowing administrators to power on remote machines or devices via the network. This is particularly useful for scheduled maintenance, software patching, or remote access scenarios where endpoints are typically turned off after hours.

• WoL for single or bulk devices
• Scheduling of remote device startups
• Subnet-based filtering for group operations
• Event logging for device wake activity

Bandwidth monitoring

The bandwidth monitoring module enables real-time tracking of network traffic across interfaces. Using SNMP polling, OpUtils collects data from routers, switches, and firewalls to visualize utilization trends, throughput, and peak usage periods.

• Interface-based monitoring of traffic in/out (bps, packets)
• Graphs for real-time and historical bandwidth usage
• Alerts for threshold breaches or abnormal patterns
• Multi-device and multi-interface comparison tools

Diagnostic and troubleshooting tools

Beyond IPAM and SPM, OpUtils offers a wide range of network diagnostic utilities—more than 30 tools in total. These include ping, traceroute, SNMP browser, DNS resolver, MAC address locator, proxy checker, and TFTP server integration.

• SNMP MIB browser for querying SNMP-enabled devices
• Ping and traceroute with latency and path metrics
• DNS tools to verify forward/reverse resolution
• MAC resolver to map IP/MAC relationships
• Config file manager for backup and versioning of Cisco configurations

Role-Based Access Control (RBAC) and integration with Active Directory

Access to OpUtils is governed through RBAC, allowing organizations to define fine-grained permissions for different user roles (e.g., admin, auditor, operator). Permissions can be scoped per module or per function (e.g., IP request approval only, read-only access to port mapping, etc.).

When integrated with Active Directory, OpUtils supports single sign-on and group-based policy enforcement. All user activity is logged for compliance and audit purposes.

• Customizable user roles with module-level privileges
• Integration with AD for centralized authentication
• IP request approval workflows linked to user identity
• Activity logging and audit trails across all modules

Why choose ManageEngine OpUtils?

• Comprehensive network resource management
  OpUtils provides unified management for IP addresses, switch ports, and network-connected devices in one interface. Its automation tools replace manual spreadsheets and eliminate configuration drift.
• Real-time visibility and proactive alerting
  From live IP and port scans to rogue device alerts and bandwidth threshold notifications, OpUtils helps administrators stay ahead of network issues before they impact operations.
• Modular design with deep functionality
  Each module—IPAM, SPM, scanning, diagnostics—is feature-rich yet integrated, allowing teams to adopt the tool incrementally or as a full suite depending on their needs.
• Highly customizable with policy-driven controls
  The platform supports custom workflows for IP assignment, user role definition, and port control, giving IT teams flexibility to align the tool with internal policies and compliance frameworks.
• On-premise deployment with low resource footprint
  Unlike many modern network management solutions, OpUtils runs on-premise with minimal hardware requirements. This offers greater control over data and system performance, especially in secure or offline environments.
• Vendor-agnostic device support
  OpUtils supports SNMP-based integration with switches, routers, and firewalls from a wide range of vendors, making it suitable for heterogeneous network environments.
• Efficient troubleshooting and diagnostics
  With over 30 built-in tools for monitoring, scanning, and configuration management, the platform reduces the time and tools required to identify and fix network issues.
• Scalable licensing and deployment
  The tool is available in different license tiers based on the number of IPs and switch ports, enabling gradual expansion as the organization grows.