emanuele-f
d0d17cef76
Do not allow to delete engaged alerts.
...
This is necessary to avoid inconstent state caused in hosts and interfaces counters.
2017-05-03 14:28:10 +02:00
Simone Mainardi
d723fd505d
Improves periodic alerts cleanup
2017-05-03 14:27:00 +02:00
Simone Mainardi
9c0f7499e7
Reduces redis traffic for alerts checks
2017-05-03 13:23:28 +02:00
emanuele-f
2c53dda60b
Fix slack alerts notifications
2017-05-03 13:10:16 +02:00
Simone Mainardi
0586a814ea
Optimizes oldest alerts cleanup
2017-05-03 12:41:36 +02:00
Simone Mainardi
4eeae18cef
Adds alert notes and descriptions
2017-05-02 22:13:43 +02:00
Simone Mainardi
d85302d80f
Fixes host activity alert
2017-05-02 17:19:06 +02:00
emanuele-f
a5e528047d
Use a single redis key to read all host anomalies configuration
2017-05-02 15:38:39 +02:00
Simone Mainardi
6f7c2b9616
Reworks default password change
2017-05-02 15:12:52 +02:00
emanuele-f
9aa7b31552
Add SafeSearch and Global DNS in traffic bridge preferences.
2017-05-02 12:47:33 +02:00
Luca Deri
24f0808c23
Merge pull request #1197 from emanuele-f/password_change
...
Force default admin password change
2017-05-02 12:14:48 +02:00
Luca Deri
1c532234ce
Reworked childSafe display
2017-05-01 23:15:57 +02:00
emanuele-f
f137f14ee5
Reload host pools when a new pool is added or configuration is changed
2017-05-01 16:02:32 +02:00
Luca Deri
73b3a3ded6
Added child safe information in host pools
...
Minor code rework
2017-05-01 15:53:23 +02:00
emanuele-f
dc86847467
Remove frequent pool re-initialization
2017-05-01 00:50:55 +02:00
emanuele-f
21594b834d
Separate syn/flow attacker and victim alert thresholds
2017-04-30 20:07:58 +02:00
Emanuele Faranda
8b8974e56c
Alerts improvements ( #1204 )
...
* Implement flow flood alert
* Remove alerts general settings
* Implement global threshold alerts for hosts, networks and interfaces
* Implement global anomaly alert configuration, lua side
* Make the global thresholds not bound to the interface
* Implement global anomaly alert configuration, C side
* Make the engaged alerts cache per interface to avoid conflics
2017-04-29 12:19:49 +02:00
Emanuele Faranda
a9bcb8b5de
Merge pull request #1203 from danielmeyer/ldap-search-validation
...
LDAP search_path parameter allows spaces
2017-04-29 12:05:32 +02:00
emanuele-f
a53ec8b131
Force the release of expired alerts
2017-04-28 16:30:23 +02:00
Daniel Meyer
0ac9dff8cd
Validation mode for search_path parameter updated to support paths containing spaces.
2017-04-28 09:08:48 -04:00
emanuele-f
f516d7edb8
Fix flow alert explorer validation error
2017-04-28 12:30:30 +02:00
emanuele-f
bf803803da
Hide children safe for non-inline interfaces
2017-04-28 11:08:41 +02:00
emanuele-f
011b7f5cdf
Force default admin password change
2017-04-27 21:15:58 +02:00
emanuele-f
f344f55116
Add children safe host pool option
2017-04-27 16:24:28 +02:00
emanuele-f
01816f3e7d
Add category name in flashstart graphs
2017-04-27 15:24:14 +02:00
emanuele-f
cc3191bc4f
Remove flapping-checking code in alert counter
2017-04-27 11:13:40 +02:00
emanuele-f
8b72607c38
Migrate interface alerts to lua logic
2017-04-27 11:07:04 +02:00
emanuele-f
426032426b
Expose the traffic profile validation function
2017-04-26 23:05:31 +02:00
emanuele-f
230d2f434c
Show SNMP host information in pro version
2017-04-26 22:34:18 +02:00
Emanuele Faranda
7d8d26efdc
Merge pull request #1182 from emanuele-f/alerts_with_cache
...
Alerts with cache
2017-04-26 20:32:46 +02:00
valentina
4dfa9cb2f3
Changed calls from sudowrapper to run script (nbox integration)
2017-04-26 19:09:39 +02:00
emanuele-f
d6469510ee
Add startup alert engine and use it for MYSQL open files limit check
2017-04-26 18:12:40 +02:00
emanuele-f
63402a848d
Invalidate cache on alerts delete
2017-04-26 18:04:11 +02:00
emanuele-f
22d9d3ad2c
Fix single alert delete
2017-04-26 17:10:05 +02:00
emanuele-f
5e663675f2
Fix flows shown in interface alert configuration
2017-04-26 16:16:12 +02:00
Simone Mainardi
57b592c905
Fixes invalid use of alert engine
2017-04-26 16:09:55 +02:00
emanuele-f
1545dcb73e
Host Flows alert becomes a threshold alert
2017-04-26 15:50:54 +02:00
emanuele-f
4afe4328eb
Enable SYN flood/victim alert generation
2017-04-26 11:23:23 +02:00
emanuele-f
bae63434c1
Implement engaged alerts cache
2017-04-24 17:24:31 +02:00
Simone Mainardi
e36554de9d
Bridged interfaces footer gauge
...
Footer gauge only shows bridged actually bridged traffic
for bridged interfaces
2017-04-24 16:19:03 +02:00
emanuele-f
52cdd7382a
Fix wrong ajax field used in time quota
2017-04-24 15:30:01 +02:00
emanuele-f
b83a93c6a5
Add preference to enable VLAN rrd dump and display VLAN rrd graphs
2017-04-24 13:00:24 +02:00
Simone Mainardi
7b13e2e6a1
Adds an engine id to the engaged alerts
2017-04-24 12:22:47 +02:00
emanuele-f
60bb301c76
Fix host search with VLANs
2017-04-24 11:17:36 +02:00
emanuele-f
eb167e8dee
Fix localization key collision causing blank historical explorer page
2017-04-23 17:21:23 +02:00
Simone Mainardi
c8c4505d9c
Adds VLANs lua getters
2017-04-23 14:20:04 +02:00
Simone Mainardi
2873438712
Handles VLAN statistics in both UI and backend
...
VLAN statistics are now properly accounted both in the front and
in the backend.
It is now required to add a toggle preference to save their
statistics (presently statistics are always saved) and it is
also requested to browse their historical protocols.
2017-04-23 12:58:10 +02:00
emanuele-f
43b3a7f078
Fix AlertCounter based host alerts
2017-04-22 19:48:09 +02:00
emanuele-f
04e01c24b0
Re-enable alerts generation. Use structured format functions.
2017-04-22 18:58:32 +02:00
emanuele-f
bfd2759eeb
Move global status to local status
2017-04-22 17:09:23 +02:00