search

UOS-RZ / deterrers

The automateD nETwork pERimeter thREat pRevention System (DETERRERS) is a tool for decentral network administration. It automates workflows at the network perimeter, e.g., automatic scanning for vulnerabilities and automatic configuration of perimter firewall policies.
BSD 3-Clause "New" or "Revised" License
2 stars 2 forks source link

Change name of empty service profile #1

Open elanfer opened 1 year ago

elanfer commented 1 year ago

Some users told me that they want to have inactive hosts also registered in DETERRERS. This could either be the case when the users want to quickly change an inactive host to an active profile, without a new registration scan, or when the users use DETERRERS for starting scans of their machines. Both use-cases are supported; however, it is confusing when the "empty profile" has no name, at all. We should change it to "No profile", "Closed" or something else, that clarifies the usage.

nwintering commented 1 year ago

I propose adding a new "None"-service profile instead of changing the name of the empty profile. With the "None"-profile you would be able to register a host to set it online in DETERRERS while still blocking all traffic at the perimeter FW. Hosts with an empty profile, however, will still not be available for registration. This should remain to be the initial state for hosts.