How to create a custom fingerprint on purview?


Hello all,

Everyone knows how to creat a custom fingerprint on purview? or where I can find the sample to refer to?

Thanks.

Regards,
Joy

5 replies

Userlevel 6
Greetings Joy,
This is discussed in some detail in the Purview Users Guide, starting about page 35.

If you navigate to this link.
https://extranet.extremenetworks.com/downloads/Pages/NMS.aspx

Select Documentation -> Select Manuals and Release Notes -> Select Version 6.2 -> Select Purview Users Guide.
Search for Custom Fingerprint Examples.

Since it is pretty comprehensive, I won't try to guess what approach you would like to take. if you have a specific example you would like to cover, please post more detail on what your trying to capture. If it's secure information, then I would recommend opening up a case.
Hi Mike,

Thanks for your feedbacks, and it's very useful for me.

Regards,
Joy
Hi Mike,

In addition question, I would like to creat a fingerprint base on port and destination address, however I can not set multiple port number in a single fingerprint.

e.g.

port 21,449,8449
destination address 192.168.1.1
new custom fingerprint name "Internal-AS400"

Do you know how to accomplish it or any other suggest?

Thanks.

Regards,
Joy
Userlevel 4
You create 3 fingerprints with the same Name.
E.G
port 21
destination address 192.168.1.1
new custom fingerprint name "Internal-AS400"

Port 449
destination address 192.168.1.1
new custom fingerprint name "Internal-AS400"

8449
port 21
destination address 192.168.1.1
new custom fingerprint name "Internal-AS400"

Example Microsoft Lync Signature


Top one is:
61013607



[i]






Bottom one is:
62013617



[i]






Either of these signatures will appear as Microsoft Lync when you generate reports for Lync.
Hello Frank,

I got it, thanks a lot.

Regards,
Joy

Reply