Jump to content

Rogue entries in ERA6


Go to solution Solved by ben.white,

Recommended Posts

Hello,

 

ERA Version 6.1.444.0 installed on Windows Server 2008 R2 SP1

 

I have 2 issues with the rogue detection service:

 

1- As far as I can see, some computers in the list of rogue computers don't exist in any DHCP, DNS or AD tables. Where is the rogue information coming from?

 

2- I have many printers and routers in this list with the wrong name associated with the MAC addresses. When I move them to a Static Folder, they are removed from the rogue entry list (which is good), however as soon as I rename them in my static folder, they appear again in the rogue list.

 

Any suggestion?

 

JP

Link to post
Share on other sites
  • 2 weeks later...
  • 2 weeks later...
  • Solution

Can you create a policy that applies to the RDS sensor, I believe there are options for white/blacklisting IP's?  Might not be quite the answer your looking for but better than nothing.

Edited by ben.white
Link to post
Share on other sites

Yes indeed!

 

I was missing a Rogue Sensor policy which allowed me to blacklist the IP addresses of our printers and non-computer devices.

 

This may not solve the original problem, but things are looking a lot more tidy now.

 

Thank you Ben

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...