Automatic Responses cannot use the Organization Name when filtering based on OUI
When creating an automatic response that filters detected systems using their OUI (Organizationally Unique Identifier), you cannot use the Organization Name in the OUI filter step. The OUI refers to the first six digits of the MAC address.
Anyone who did the Beta can you confirm: Does this mean that we cant auto filter on OUI name info anymore then?? (unless we have figured out what the different codes are for what was shown as plain text in 3.6.1)
when you open the network sensor control area it really racks up the CPU for a bit, but then calms down. Network traffic hit is configurable with timeouts and whether you collect the additional info (see the new EPO 4.02 manual section on RSD 2.0).
oh and the worse "Feature" you cant set responses on organization only on the oui...
Seems to be working fine here. We just upgraded from 3.6 to 4.0 patch 2 last week. I love the new interface and rogue sensor works well. It just doesn't work with DHCP on a 64 bit server. It only sees the subnet the dhcp server is on. Well, they said they don't support 64 bit.... sad