Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Why Are There Multiple Agents Showing the Same IP Address?

App Control: Why Are There Multiple Agents Showing the Same IP Address?

Environment

  • App Control Console: All Supported Versions
  • App Control Agent: All Supported Versions

Question

When looking at "Assets" > "Computers" in the App Control console, why do we see multiple endpoints with duplicate IP addresses or the wrong IP address?

Answer

There is a network appliance between the Agent and Server which is causing duplicated IP addresses. This could be a proxy, NetScaler solutions, TCP/IP connection reuse, etc.

Additional Notes

  • A tool such as WireShark can show the incoming connections to the App Control Server. This will help to show which IPs are connecting to the machine and may narrow down where the incorrect IP is coming from.
  • Having duplicate IP's showing in the console shouldn't cause any communication issues with the Agent.

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
557
Contributors