In my zone director I have rogue devices listed but no option to mark as malicious. Only option is mark as known. Shouldn't I be able to user mark there as malicious if I want?
Our assumption for the GUI is that any not marked as known are (presumed) malicious.
Your suggestion changes the state model from 2-states (known, malicious) to 3 (null, malicious, known) Can you describe how you would use that extra null bit?
Brain fart!
You can only mark as malicious if the rogue is being actively detected.
After a while the rogue is ignored and is not shown.
I have approx 8 rogues i see occasionally but they are only visible when freshly detected.
I would prefer to have a long list of all of them whether active or not but that is the way the ZD gui presents them. Perhaps Keith can explain the methodology and tuimeout reasoning?
It took a while for me to work all that out when setting up the ZD.