|
1 | 1 | ---
|
2 | 2 | title: Maintain Defender for IoT OT network sensors from the GUI - Microsoft Defender for IoT
|
3 | 3 | description: Learn how to perform maintenance activities on individual OT network sensors using the OT sensor console.
|
4 |
| -ms.date: 07/04/2023 |
| 4 | +ms.date: 12/07/2023 |
5 | 5 | ms.topic: how-to
|
6 | 6 | ---
|
7 | 7 |
|
@@ -427,6 +427,31 @@ After clearing data on a cloud-connected sensor:
|
427 | 427 |
|
428 | 428 | A confirmation message appears that the action was successful. All learned data, allowlists, policies, and configuration settings are cleared from the sensor.
|
429 | 429 |
|
| 430 | +## Manage custom plugins (legacy) |
| 431 | + |
| 432 | +If you've added custom plugins for proprietary protocols using the legacy Horizon support, you can continue to manage them from the sensor console. |
| 433 | + |
| 434 | +**To access your custom plugins**: Sign into your OT sensor console and select **System settings > Network monitoring > Protocols DPI (Horizon Plugins)**. |
| 435 | + |
| 436 | +**To enable or disable plugins**: Select the **Enable/Disable** toggle for each plugin you want to enable or disable. |
| 437 | + |
| 438 | +**To monitor plugin performance**: Use the data shown on the **Protocols DPI (Horizon Plugins)** page in the sensor console to understand details about your plugin usage. To help locate a specific plugin, use the **Search** box to enter part of all of a plugin name. |
| 439 | + |
| 440 | +The **Protocols DPI (Horizon Plugins)** lists the following data per plugin: |
| 441 | + |
| 442 | +|Column name |Description | |
| 443 | +|---------|---------| |
| 444 | +|**Plugin** | Defines the plugin name. | |
| 445 | +|**Type** | The plugin type, including APPLICATION or INFRASTRUCTURE. | |
| 446 | +|**Time** | The time that data was last analyzed using the plugin. The time stamp is updated every five seconds. | |
| 447 | +|**PPS** | The number of packets analyzed per second by the plugin. | |
| 448 | +|**Bandwidth** | The average bandwidth detected by the plugin within the last five seconds. | |
| 449 | +|**Malforms** | The number of malform errors detected in the last five seconds. Malformed validations are used after the protocol has been positively validated. If there's a failure to process the packets based on the protocol, a failure response is returned. | |
| 450 | +|**Warnings** | The number of warnings detected, such as when packets match the structure and specifications, but unexpected behavior is detected, based on the plugin warning configuration. | |
| 451 | +| **Errors** | The number of errors detected in the last five seconds for packets that failed basic protocol validations for the packets that match protocol definitions. | |
| 452 | + |
| 453 | +Horizon log data is available for export in the **Dissection statistics** and **Dissection Logs**, log files. For more information, see [Export troubleshooting logs](how-to-troubleshoot-sensor.md). |
| 454 | + |
430 | 455 | ## Next steps
|
431 | 456 |
|
432 | 457 | For more information, see:
|
|
0 commit comments