OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: fightingmasta on March 06, 2019, 12:37:31 pm

Title: [SOLVED] Proofpoint Telemetry status
Post by: fightingmasta on March 06, 2019, 12:37:31 pm
Hi

I have installed os-etpro-telemetry and inserted the token, but the status is disabled.
What can I do or in which log file can I search for an error?
In System: Log Files: General I don't see an error.

Thanks.
Title: Re: Proofpoint Telemetry status
Post by: franco on March 06, 2019, 12:45:41 pm
From https://docs.opnsense.org/manual/etpro_telemetry.html :

The status determines which ruleset your sensor will receive, ACTIVE or DORMANT your sensor will receive ET Pro rule, when DISABLED the license conditions are not met and ET Open will be served.

You are probably not generating alerts, so the meta data sharing is empty so it looks like you're not sharing. Try to enable a few alerts that can be sent to Proofpoint.


Cheers,
Franco
Title: Re: Proofpoint Telemetry status
Post by: fightingmasta on March 06, 2019, 01:59:15 pm
Thanks Franco.
I didn't made a change nor generated an alert, but the status switched to Active now.
Regards,
Stefan
Title: Re: Proofpoint Telemetry status
Post by: franco on March 06, 2019, 04:01:04 pm
Hi Stefan,

Okay, even better. :)


Cheers,
Franco
Title: Re: [SOLVED] Proofpoint Telemetry status
Post by: marcri on September 16, 2019, 11:43:23 am
Same problem here. It seems my network ist too clean, no alerts since Aug 28 so Proofpoint Telemetrie ist disabled. I don't want to generate fake alterts, because it will generate e-mail-notifications and so on. any other ideas?