OPNsense Forum
English Forums => Intrusion Detection and Prevention => Topic started by: fightingmasta on March 06, 2019, 12:37:31 pm
-
Hi
I have installed os-etpro-telemetry and inserted the token, but the status is disabled.
What can I do or in which log file can I search for an error?
In System: Log Files: General I don't see an error.
Thanks.
-
From https://docs.opnsense.org/manual/etpro_telemetry.html :
The status determines which ruleset your sensor will receive, ACTIVE or DORMANT your sensor will receive ET Pro rule, when DISABLED the license conditions are not met and ET Open will be served.
You are probably not generating alerts, so the meta data sharing is empty so it looks like you're not sharing. Try to enable a few alerts that can be sent to Proofpoint.
Cheers,
Franco
-
Thanks Franco.
I didn't made a change nor generated an alert, but the status switched to Active now.
Regards,
Stefan
-
Hi Stefan,
Okay, even better. :)
Cheers,
Franco
-
Same problem here. It seems my network ist too clean, no alerts since Aug 28 so Proofpoint Telemetrie ist disabled. I don't want to generate fake alterts, because it will generate e-mail-notifications and so on. any other ideas?