Hello, I would like to have a "matching" sensor checking for devices that should not be on a subnet/ behind a probe.
- Give a HIGH ALERT notification
- Give as much as possible details about that device (start collecting and logging).
- Give the option to add the detected strange device on a "safe-list for that probe" or add it to the active monitoring.
- The safe list must be easy accessible so users can review the list so now and then.
- A report template for incident or anomalie detection with a risk diagram (network info, types of protocols used by the device, to what devices the strange device has been talking etc etc).
Article Comments
Hello Arne,
That is exactly why it's a feature request... To get it upvoted and get a standard sensor for it on each probe (out of the box).
I have time to wait for that (I don't like all this custom scripting because there's alway something wrong with it after updates/ upgrades/ changes in the network etc).
Nov, 2021 - Permalink
Hello,
for feature requests, please use this template.
As we develop standard software, we look at the standard use case. That means two things: Many requests cannot be implemented as other features are in higher demand. On the other hand, many of the features which do get implemented are based on user feedback.
Nov, 2021 - Permalink
Alright, Can your please delete this one, I have created a new request with the template requirements...
But please see it as a request and don't just start with telling people "this is not possible and create your own script (oh and by the way, we do not support custom scripts).... It's not very motivating....
Do realise that people like PRTG and just would love to get additional functions, it will improve PRTG over time.
Nov, 2021 - Permalink
Hello,
this is not possible out of the box with PRTG. You might want to look into the PRTG API how one can extract information out of PRTG, and custom notifications in order to run your own scripts upon a notification trigger.
Nov, 2021 - Permalink