LevelBlue Completes Acquisition of Cybereason. Learn More
Get access to immediate incident response assistance.
In the firewall activity reports for Gauntlet, internal and external users are confused in the e-mail traffic sections.
Because of the manner in which Gauntlet firewalls record e-mail traffic, it is necessary to add an additional entry in the IP's Behind Firewall section of the profile set-up for the domain of the internal e-mail senders.
For example, if the domain is example.com, add *@example.com to the IP's behind Firewall tab. This will place the e-mail senders in their correct areas of the final report.
This article was previously published as: NETIQKB2368
To contact Trustwave about this article or to request support: