Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More
Access immediate incident response support, available 24/7
In the firewall activity reports for Gauntlet, internal and external users are confused in the e-mail traffic sections.
Because of the manner in which Gauntlet firewalls record e-mail traffic, it is necessary to add an additional entry in the IP's Behind Firewall section of the profile set-up for the domain of the internal e-mail senders.
For example, if the domain is example.com, add *@example.com to the IP's behind Firewall tab. This will place the e-mail senders in their correct areas of the final report.
This article was previously published as: NETIQKB2368
To contact LevelBlue about this article or to request support: