topic Re: Mark as Malicious missing in zone director in ZoneDirector

Mark as Malicious missing in zone director

jennifer_rogers — Wed, 16 Apr 2014 16:47:12 GMT

In my zone director I have rogue devices listed but no option to mark as malicious. Only option is mark as known. Shouldn't I be able to user mark there as malicious if I want?

Re: Mark as Malicious missing in zone director

keith_redfield — Wed, 16 Apr 2014 17:00:18 GMT

Our assumption for the GUI is that any not marked as known are (presumed) malicious.

Your suggestion changes the state model from 2-states (known, malicious) to 3 (null, malicious, known) Can you describe how you would use that extra null bit?

Re: Mark as Malicious missing in zone director

max_o_driscoll — Thu, 17 Apr 2014 09:49:05 GMT

Interesting...as I inZD1100 I see possible rogue(s) and then have the option to mark as known or malicious.

Re: Mark as Malicious missing in zone director

max_o_driscoll — Thu, 17 Apr 2014 09:51:06 GMT

When marked as malicious the interface changes to...

Re: Mark as Malicious missing in zone director

max_o_driscoll — Thu, 17 Apr 2014 09:56:14 GMT

Brain fart!
You can only mark as malicious if the rogue is being actively detected.
After a while the rogue is ignored and is not shown.

I have approx 8 rogues i see occasionally but they are only visible when freshly detected.
I would prefer to have a long list of all of them whether active or not but that is the way the ZD gui presents them. Perhaps Keith can explain the methodology and tuimeout reasoning?

It took a while for me to work all that out when setting up the ZD.

Re: Mark as Malicious missing in zone director

keith_redfield — Thu, 17 Apr 2014 14:01:18 GMT

Thanks for the gentle correction Max! Relying on memory alone not always smart ;)

There's been some work on rogue detection on later releases (which I believe you are running) so let me see what I can find out.