Environment
- Cb Defense Web Console: All versions
Question
What type of IP Addresses can be used for SIEM Connectors?
Answer
IP Addresses for SIEM Connectors, if they are used, should always be public IP addresses.
Additional Notes
The "Authorized Address" can be configured to allow only certain public IP addresses to connect with the SIEM connector to the Cb Defense backend. Since Cb Defense is cloud based and not on premise, Private IP addresses will not work.
Related Content
Cb Defense: How to Configure Add-on Settings for Splunk SIEM Connector
