Hi dear friends,
Recently our customer has made a SNAT configuration changes on F5 Load-Balancer for some their product servers. There are SEP agents on these servers and SEP has IPS module which we installed before. There is no problem with principle of operations of IPS module. IPS is making it job but after these changes in the IPS security log they have started to see remote host as F5 Load-Balancer IP address. Previously they could see the proper remote host IP as it should be.
What should do they to solve this visual problem ? Is there anything i can da to solve it on the SEP Manager server in IPS module section ?
I was thinking about this situation but i can not find a proper way to do it.
You can inspect the attachment jpeg
192.168.250.150/149 F5 Load-Balancer IP addresses
Thank you.
Batuhan Calin
Symantec Silver Partner