Le 19-02-25 à 15 h 16, Enrico a écrit :
Hello Fabrice,
at last I understood that it can be the dhcp to determine the
frequency of endpoint scan.
Anyway even now I still have an unknown problem because I wanted to
assign ip address for
very long shots of time (6 months and more) in order to create a sort
of static ip.
Keep in mind that at the moment the endpoint is constantly being
scanned, at each
network access, event if the lease time hasn’t been outreached yet.
You can raise the scan violation with a grace period of x weeks.
I also have problems with resolution of local names when using PFDNS.
From what I can see in logs the local host names aren’t even
considered and all the requests
are forwarded to the officially dns servers of my network. These dns
servers fail to resolve
because they don’t know anything about PF managed local zones.
Can you explain more, i am not sure to understand the issue.
Regards
Fabrice
To sum it up I think I’ll have to rethink all the project, by adding
the enforcement vlan mode
instead of inline one and maybe apply it to this mailing list to check
if it is realizable.
Thanks a lot again.
Best Regards
Enrico
Il 25/02/19 18:57, Durand fabrice via PacketFence-users ha scritto:
Hello Enrico,
after registration needs to be trigger by something and in your case
it can be a dhcp packet.
So let's say your lease time is 1 week then the scan will be trigger
each week.
Or you can add the violation by script:
pfcmd violation add 00:11:22:33:44:55 1100007
Regards
Fabrice
Le 19-02-25 à 09 h 16, Enrico Becchetti via PacketFence-users a écrit :
Dear All,
I make some tests using openvas and now I would like to ask if it is
possible to configure
the frequency with which to check the endpoints.
From web gui I can choose only when make scan: pre registration,
during or after registration.
Do I choose how often make this scan on the same client ?
Thanks a lot.
Best regards
Enrico
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
