topic RE: How to create a custom fingerprint on purview? in ExtremeCloud IQ- Site Engine Management Center

How to create a custom fingerprint on purview?

Joy_Liu — Tue, 12 May 2015 17:20:00 GMT

Hello all,

Everyone knows how to creat a custom fingerprint on purview? or where I can find the sample to refer to?

Thanks.

Regards,
Joy

RE: How to create a custom fingerprint on purview?

Mike_Thomas — Tue, 12 May 2015 17:40:00 GMT

Greetings Joy,
This is discussed in some detail in the Purview Users Guide, starting about page 35.

If you navigate to this link.
https://extranet.extremenetworks.com/downloads/Pages/NMS.aspx

Select Documentation -> Select Manuals and Release Notes -> Select Version 6.2 -> Select Purview Users Guide.
Search for Custom Fingerprint Examples.

Since it is pretty comprehensive, I won't try to guess what approach you would like to take. if you have a specific example you would like to cover, please post more detail on what your trying to capture. If it's secure information, then I would recommend opening up a case.

RE: How to create a custom fingerprint on purview?

Joy_Liu — Tue, 12 May 2015 19:17:00 GMT

Hi Mike,

Thanks for your feedbacks, and it's very useful for me.

Regards,
Joy

RE: How to create a custom fingerprint on purview?

Joy_Liu — Wed, 13 May 2015 08:15:00 GMT

Hi Mike,

In addition question, I would like to creat a fingerprint base on port and destination address, however I can not set multiple port number in a single fingerprint.

e.g.

port 21,449,8449
destination address 192.168.1.1
new custom fingerprint name "Internal-AS400"

Do you know how to accomplish it or any other suggest?

Thanks.

Regards,
Joy

RE: How to create a custom fingerprint on purview?

Frank_Thomas — Thu, 14 May 2015 21:37:00 GMT

You create 3 fingerprints with the same Name.
E.G
port 21
destination address 192.168.1.1
new custom fingerprint name "Internal-AS400"

Port 449
destination address 192.168.1.1
new custom fingerprint name "Internal-AS400"

8449
port 21
destination address 192.168.1.1
new custom fingerprint name "Internal-AS400"

Example Microsoft Lync Signature

Top one is:
61013607

Bottom one is:
62013617

Either of these signatures will appear as Microsoft Lync when you generate reports for Lync.

RE: How to create a custom fingerprint on purview?

Joy_Liu — Fri, 15 May 2015 12:20:00 GMT

Hello Frank,

I got it, thanks a lot.

Regards,
Joy