Hello,
So here's my situation. We want to enforce that some software is running
on all Windows and Mac computers. We opted for doing an SNMP query for
running processes to accomplish this. Back in PF 3.x, I would then run a
MySQL query to log a violation if the software was not found. This worked
beautifully.
However, in PF 4.1 it doesn't seem to be behaving quite right. The
violation is set to "Trap" and "Log" on occurrence. The reality is that it
also de-registers the offending computer, but the computer STILL can access
the Internet without any trouble. Any guidance on how to occomplish this?
Below is the MySQL query I'm running if that helps. It is constructed/run
in a Perl script.
INSERT INTO violation (mac,vid,start_date,status,notes) VALUES("' .
$ipresults[1] . '", 1500077, NOW(), "open", "Not Running Impero.")
Thanks,
Joshua Nathan
IT Administrator
Black Forest Academy
+49 (0) 7626-916123
------------------------------------------------------------------------------
WatchGuard Dimension instantly turns raw network data into actionable
security intelligence. It gives you real-time visual feedback on key
security issues and trends. Skip the complicated setup - simply import
a virtual appliance and go from zero to informed in seconds.
http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
