ManageEngine OpUtils is a network monitoring and management software designed for IT administrators, network engineers, and NOC teams in medium to large enterprises. It provides a unified platform for IP address management (IPAM) and switch port mapping (SPM), offering in-depth visibility into network resource allocation, topology, and device connectivity.

The software automates discovery, scanning, and monitoring processes, helping network teams maintain accurate IP records, manage switch port usage, detect anomalies, and troubleshoot network issues in real time.

With support for both IPv4 and IPv6, and tools for DHCP integration, rogue device detection, bandwidth monitoring, and more, OpUtils simplifies core network operations through a web-based interface.

What are the main features of ManageEngine OpUtils?

Real-time IP Address Management (IPAM)

OpUtils offers detailed control and visualisation of IP address spaces across complex networks. Through automated subnet discovery and scanning, it identifies used, available, and conflicting IPs in real time. Administrators can define scanning intervals, view subnet utilisation trends, and allocate or reclaim addresses using integrated request workflows.

This module supports both IPv4 and IPv6 and integrates with DHCP servers to track lease expirations, scope utilisation, and address distribution. A built-in IP request tool with approval workflows ensures that IP assignment processes remain structured and auditable. Role-Based Access Control (RBAC) and Active Directory (AD) integration enforce strict access policies.

• Scheduled and on-demand subnet scanning with a visual subnet hierarchy
• Status updates for each IP (used, transient, available, excluded, reserved)
• Graphical dashboards showing IP utilisation patterns and subnet health
• DHCP scope monitoring with support for major vendors
• IP request portal with custom workflows and approval stages
• Access controls tied to AD groups and organisational roles

Switch Port Mapping (SPM)

The Switch Port Mapper module helps IT teams maintain an accurate view of physical network connectivity by mapping switch ports to connected devices. OpUtils uses SNMP to retrieve information from managed switches and correlates this data with IP and MAC addresses, device names, and user identities.

• Auto-discovery of switches and port-device associations
• Real-time mapping of IP, MAC, and VLAN information to specific ports
• Identification of inactive, unresponsive, or overutilised ports
• Bulk management actions such as disabling unused ports
• Port-level history to trace device connection timelines

Rogue Device Detection and MAC Address Filtering

OpUtils enhances network security by continuously scanning the LAN for unauthorised or unknown devices. The rogue detection module compares discovered devices against a trusted device list and flags any deviations. Administrators can label devices as "trusted", "guest", or "rogue", and define alert and remediation policies accordingly.

MAC address filters further tighten access control by ensuring only whitelisted devices can be assigned IPs or connected via critical ports. AD integration allows organisations to correlate device usage with user identity.

• Continuous network scans for unknown devices
• Customisable alerts for new or unauthorised devices
• Categorisation and manual override of device trust status
• MAC filtering to block or monitor specific hardware identifiers
• Reporting on device entry/exit times and connection paths

Integrated IP and Port Scanners

OpUtils includes built-in IP and port scanning tools that provide instant visibility into host availability and open service ports across network segments. These scanners are essential for vulnerability analysis, service discovery, and policy enforcement.

• Fast IP discovery to identify live devices in real time
• Port scanning to list open/closed/filtered ports per host
• Detection of unexpected or unauthorised services
• Exportable reports for auditing or inventory
• Integration with other OpUtils modules for cross-referencing

Wake on LAN (WoL)

OpUtils supports Wake on LAN, enabling administrators to remotely power on machines or devices via the network. This feature is ideal for scheduled maintenance, patch management, or remote access when endpoints are typically shut down after hours.

• WoL for single or multiple devices
• Scheduling of remote device startups
• Subnet-based filtering for group actions
• Event logging for wake activity

Bandwidth Monitoring

The bandwidth monitoring module provides real-time tracking of network traffic across interfaces. Using SNMP polling, OpUtils collects data from routers, switches, and firewalls to visualise trends, throughput, and peak usage.

• Interface-level monitoring of inbound/outbound traffic (bps, packets)
• Real-time and historical bandwidth usage graphs
• Alerts for threshold breaches or abnormal usage patterns
• Comparison tools for multiple devices and interfaces

Diagnostic and Troubleshooting Tools

In addition to IPAM and SPM, OpUtils offers over 30 network diagnostic tools. These include ping, traceroute, SNMP browser, DNS resolver, MAC address locator, proxy checker, and TFTP server integration.

• SNMP MIB browser for querying SNMP-enabled devices
• Ping and traceroute with latency and route data
• DNS tools for forward and reverse lookup verification
• MAC resolver to map IP and MAC addresses
• Configuration file manager for Cisco backup and versioning

Role-Based Access Control (RBAC) and Active Directory Integration

Access to OpUtils is managed through RBAC, allowing organisations to define precise permissions for different user roles (e.g., admin, auditor, operator). Permissions can be scoped by module or by function (e.g., IP request approvals only, read-only access to port mapping).

When integrated with Active Directory, OpUtils supports single sign-on and enforces group-based policies. All user activity is logged for auditing and compliance.

• Customisable user roles with module-level permissions
• Centralised authentication via Active Directory
• IP request approval workflows tied to user identity
• Logging and audit trails across all modules

Why Choose ManageEngine OpUtils?

Comprehensive Network Resource Management

OpUtils unifies the management of IP addresses, switch ports, and connected devices in a single platform. Its automation features replace manual spreadsheets and prevent configuration drift.

Real-Time Visibility and Proactive Alerts

From real-time scans to rogue device alerts and bandwidth threshold notifications, OpUtils helps administrators stay ahead of network issues before they cause disruption.

Modular Design with Advanced Features

Each module—IPAM, SPM, scanning, diagnostics—is powerful on its own yet seamlessly integrated, allowing gradual or full adoption based on organisational needs.

Highly Customisable and Policy-Driven

OpUtils supports custom workflows for IP management, user roles, and port controls, ensuring alignment with internal processes and compliance requirements.

On-Premises Deployment with Minimal Resource Requirements

Unlike many cloud-based solutions, OpUtils runs on-premises with a lightweight footprint, offering enhanced control and performance in secure or offline environments.

Multi-Vendor Device Support

With SNMP-based compatibility, OpUtils works with switches, routers, and firewalls from a wide range of vendors—ideal for diverse network environments.

Efficient Troubleshooting and Diagnostics

Over 30 built-in tools streamline network monitoring, scanning, and configuration tasks, helping teams quickly identify and resolve issues.

Scalable Licensing and Deployment

OpUtils is available in scalable licence tiers based on the number of IPs and ports to manage, making it easy to expand alongside your organisation.