Firebox feature key expiry notifications - any way to tune these?
I manage a number of MSSP licensed Firebox appliances that, by design [of the MSSP setup], have new feature keys that are retrieved every month.
The issue is that I have setup notifications for device alarms in WatchGuard Cloud and every month, 30 days before the actual expiry of the existing feature key, I get a number of alerts about this.
For regular Fireboxes that have feature keys that have validity in number of years (1, 3...) that is fine, but given MSSP appliances don't work that way it means I get flooded with these alerts every month, and given the nature of them, I get more than one per appliance too.
Is there a way for the MSSP appliances to tune when the feature key expiry notifications trigger, say 6 or 7 days before only?
If it means delving into the CLI to do it that is fine in our case as it would only be done on the MSSP appliances anyway.
I don't want to turn it off in case there is an issue retrieving them (eg. if the Firebox hasn't been able to retrieve the new keys automatically - which has happened before), but by the same token turning the notifications off (which such a setting does exist for) means someone could miss a feature key update alert issue, which unlike normal Fireboxes, means the MSSP appliance stops working (as there is an actual expiry coded in, vs "never" for most Fireboxes).
Comments
Hi @PhilT_VIT
There is an existing feature request to allow this to be tuned closer to 0-1 days prior to expiry. If you'd like to follow that request, please open a support case and mention FCCM-8579 somewhere in the case -- the technician assigned to the case can set that up for you.
Thank you,
-James Carson
WatchGuard Customer Support