Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Wrong IP listed for a machine in the Bit9 Console

Wrong IP listed for a machine in the Bit9 Console

Version

All.

 

Issue

The wrong IP address is listed for a Bit9 Agent machine on the Bit9 Console.

 

Symptoms

When viewing computers on the Bit9 Console, the wrong IP is listed for a machine or multiple machines.

 

Cause

The Bit9 Server uses the IP address seen during the connection with the Bit9 Agent for the IP address shown on the Bit9 Console.

 

Solution

This is the expected behavior for Bit9. The Bit9 Agent does not send the local IP address to the Bit9 Server. Work with your networking team to determine what is causing the connection to show a different IP address (proxy, NetScaler solutions, TCP/IP connection reuse, etc).

 

Important Note(s)

A tool such as WireShark can show the incoming connections to the Bit9 Server. This will help to show which IPs are connecting to the machine and may narrow down where the incorrect IP is coming from.

Labels (1)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎01-12-2015
Views:
558
Contributors