We have a wireless network that is currently available 24 X 7.  It
includes a guest SSID to allow visitors to our office to easily access
the internet.  In an effort to keep this account from being used by the
neighbors to get free internet access, we are thinking of restricting
its use to certain hours. 

Since by monitoring the switch I can see the bandwidth used on the AP's,
this seems like a perfect point to study to see if we even have any
after hour's users to worry about.  Now for the Zenoss question:

Is there a way for me to set up an alert that is triggered during a
certain window of time by use over a threshold that I set?  One way I
could do this would be to set the threshold and then use production
state to say that the AP's are down during the day but this seems like a
hack to me. 

It seems that there should be a way to do this in a more straight
forward way.  The data is all in the system, I just need to figure how
to access and use it.  If I can make this work it actually opens up
Zenoss for use as a security tool.  I.e. if somebody accesses the
accounting system after hours, it alerts and, if this is not normal
activity, I at least know to take a look.

One thing that would be needed is to add a start and stop data/time
filter to the alerting rules.  This seems pretty easy. The other part
would be to add filters that allow you to look at more than just events.
This may not be so easy, I don't know.

 

Anyway, thanks for any insight;

 

James

 

 

 

 

 

James Alspach
Systems Analyst II

Shasta County Office of Education

1644 Magnolia avenue

Redding, California

96003
[email protected] <mailto:[email protected]> 
(530) 225-0293

 

IT Hotline: 225-0279

[email protected] <mailto:[email protected]> 

 

_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users

Reply via email to