UNSOLVED

YukaR

updated

13 years ago

Y

YukaR

4 Posts

0

677

January 13th, 2014 10:00

VEE 6.0+ does not transfer source IP information to the endpoint (Varonis)

Hi, does anyone know whether VEE version 6 and up stopped sending source IP information?

We have three VEEs, one is v5 and two v6, v5 does send an IP while 6s do not.

Thank you!

  • christopher_ime

    6 Operator

    1962 Posts

    390

    0

    Posted January 13th, 2014 21:00

    Firstly, welcome to the forums, and above all, thank you for being an EMC customer.


    Please consider moving this question as-is (no need to recreate) to the proper forum for maximum visibility.  Questions written to the users' own "Discussions" space don't get the same amount of attention and can go unanswered for a long time.

    You can do so by selecting "Move" under ACTIONS along the upper-right.  Then search for and select: "Celerra Support Forum".

    Celerra Support Forum

  • YukaR

    4 Posts

    390

    0

    Posted January 14th, 2014 10:00

    Thanks so much Chris,

    Hopefully we will get some pro answers here

  • Rainer_EMC

    6 Operator

    8645 Posts

    390

    0

    Posted January 14th, 2014 11:00

    Hi,

    what exactly do you mean ?

    Did you open a Service request for it ?

  • YukaR

    4 Posts

    390

    0

    Posted January 14th, 2014 12:00

    Hello Rainer,

    We had to check before opening anything.

    I work for Varonis. We have a customer complaining that the events collected by our system from VEE 6+ do not have a client source IP in the file system event information.

    Older version surely had it, so I am wondering if anything was changed and new VEE versions do not send client source IP anymore, or there's an issue.

    Do you by any chance know?

    Thanks so much,

    Julian

  • Rainer_EMC

    6 Operator

    8645 Posts

    390

    0

    Posted January 16th, 2014 02:00

    Hi Julian,

    I have not heard about Problems or changes there.

    Please open a Service request so that this can be properly investigated.

    Rainer

  • YukaR

    4 Posts

    390

    0

    Posted January 16th, 2014 06:00

    Thank you Rainer, we will tell the customer to open a case!

  • Rainer_EMC

    6 Operator

    8645 Posts

    390

    0

    Posted January 16th, 2014 07:00

    when you open the SR tell support to check it is related to AR 611610