Device visibility and scanning including network segments

1. A method comprising:

selecting a first device, communicatively coupled to a network, based on the first device performing network address translation (NAT), wherein the first device is communicatively coupled to a second device, and wherein the second device is configured to communicate through the first device;

accessing network session information associated with the first device, wherein the network session information comprises an address associated with the second device;

determining, with a processing device, an identifier associated with the second device based on the network session information;

configuring a port forwarding policy on the first device based on the network session information;

performing a scan of the second device based on the port forwarding policy; and

storing the results of the scan.

2. The method of claim 1 further comprising:

performing an action based on the scan.

3. The method of claim 1 further comprising:

removing the port forwarding policy on the first device.

4. The method of claim 1 , wherein the second device is a NAT device, further comprising:

accessing network session information associated with the second device, wherein the network session information comprises an address associated with a third device;

determining, with the processing device, an identifier associated with the third device based on the network session information;

configuring a port forwarding policy on the second device based on the network session information associated with the second device;

performing a scan of the third device based on the port forwarding policy; and

storing the results of the scan.

5. The method of claim 1 , wherein the first device is at least one of a router, a firewall, a switch, or a carrier grade (CG) NAT device.

6. The method of claim 1 , wherein the port forwarding policy of the first device is configured using at least one of an application programming interface (API), command line interface (CLI), or a simple network management protocol (SNMP) interface.

7. The method of claim 1 further comprising:

determining an operating system (OS) of the second device based on the network session information.

8. The method of claim 1 , wherein the identifier of the second device comprises a unique identifier comprising an IP address associated with the second device and an IP address associated with the first device.

9. The method of claim 8 , wherein the unique identifier of the second device further comprises a media access control (MAC) address associated with the first device.

10. A system comprising:

a memory; and

a processing device, operatively coupled to the memory, to:

select a first device, communicatively coupled to a network, based on the first device performing network address translation (NAT), wherein the first device is communicatively coupled to a second device, and wherein the second device is configured to communicate through the first device;

access network session information associated with the first device, wherein the network session information comprises an address associated with the second device;

determine an identifier associated with the second device based on the network session information;

configure a port forwarding policy on the first device based on the network session information;

perform a scan of the second device based on the port forwarding policy; and

store the results of the scan.

11. The system of claim 10 , wherein the processing device further to perform an action based on the scan.

12. The system of claim 10 , wherein the processing device further to remove the port forwarding policy on the first device.

13. The system of claim 11 , wherein the first device is at least one of a router, a firewall, a switch, or a carrier grade (CG) NAT device.

14. The system of claim 11 , wherein the port forwarding policy of the first device is configured using an application programming interface (API).

15. The system of claim 10 , wherein the processing device further to determine an operating system (OS) of the second device based on the network session information.

16. The system of claim 10 , wherein the identifier of the second device comprises a unique identifier comprising an IP address associated with the second device and an IP address associated with the first device.

17. The system of claim 10 , wherein the unique identifier of the second device further comprises a media access control (MAC) address associated with the first device.

18. A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:

select a first device, communicatively coupled to a network, based on the first device performing network address translation (NAT), wherein the first device is communicatively coupled to a second device, and wherein the second device is configured to communicate through the first device;

access network session information associated with the first device, wherein the network session information comprises an address associated with the second device;

determine a unique identifier associated with the second device based on the network session information;

configure a port forwarding policy on the first device based on the network session information;

perform a scan of the second device based on the port forwarding policy; and

store the results of the scan.

19. The non-transitory computer readable medium of claim 18 , wherein the instructions further cause the processing device to perform an action based on the scan.

20. The non-transitory computer readable medium of claim 18 , wherein the instructions further cause the processing device to remove the port forwarding policy on the first device.

21. The non-transitory computer readable medium of claim 18 , wherein the first device is at least one of a router, a firewall, a switch, or a carrier grade (CG) NAT device.