Introducing SOC Insights for BloxOne Threat Defense: Boost your SOC efficiency with AI-driven insights to eliminate manual work and accelerate investigation and response times. Read the blog announcement here.

Reporting

Reply

Rogue device detection

New Member
Posts: 1
1082     0

Hi,

We use InfoBlox in our organisation, primarily for DHCP functionality. I am reaching out to see if there is an option within InfoBlox to detect an unauthorized machine requesting a DHCP address? 

 

Is there any way you can run a report that can inspect the hostname and flag anything non conforming i.e first 4 characters of hostname for example?

 

Kind Regards

 

Amit

Re: Rogue device detection

[ Edited ]
Superuser
Posts: 81
1083     0

Hello, 

 

If you have Infoblox reporting solution in place, you may explore the data within ib_dhcp_lease_history index(Something like : NOT OPTION12HOST="startstring*" etc). Note that there are other indexes that you could explore too.

 

Best regards,

Showing results for 
Search instead for 
Did you mean: 

Recommended for You