Quantcast
Channel: Forcepoint Community
Viewing all articles
Browse latest Browse all 2011

XID User Map showing IP addresses in reverse

$
0
0

Has anyone seen this before? We are having some problems some users on thin clients aren't being logged by username, but within their citrix sessions they are.

IP addresses in bold are being reported in reverse order, which makes no sense. the rest of the IPs in the list are normal and are fine. 

Websense Support attributes this to a network issue; which i completely disagree with considering many computers within the same subnets are showing correctly in log and seem to get reported correctly.

They suspect it's a Reverse DNS issue, but I don't buy it.

 

The XID User Map shows this:

Number of entries in map is : 135

IP : 101.109.168.192 User: DOMAIN\tjk Timeout: 10-09-2014 06:38:00.0 Timestamp: 10-08-2014 06:38:00.0 Agent type: DC

IP : 102.109.168.192 User: DOMAIN\bfa Timeout: 10-09-2014 08:14:53.0 Timestamp: 10-08-2014 08:14:53.0 Agent type: DC

IP : 104.109.168.192 User: DOMAIN\rcs Timeout: 10-09-2014 10:00:30.0 Timestamp: 10-08-2014 10:00:30.0 Agent type: DC

IP : 105.106.168.192 User: DOMAIN\jed Timeout: 10-09-2014 07:03:13.0 Timestamp: 10-08-2014 07:03:13.0 Agent type: DC

IP : 105.109.168.192 User: DOMAIN\arg Timeout: 10-08-2014 14:18:20.0 Timestamp: 10-07-2014 14:18:20.0 Agent type: DC

IP : 106.111.168.192 User: DOMAIN\kralwhse Timeout: 10-09-2014 07:59:34.0 Timestamp: 10-08-2014 07:59:34.0 Agent type: DC

IP : 107.111.168.192 User: DOMAIN\neg Timeout: 10-09-2014 09:13:08.0 Timestamp: 10-08-2014 09:13:08.0 Agent type: DC

IP : 110.111.168.192 User: DOMAIN\rks Timeout: 10-09-2014 08:17:40.0 Timestamp: 10-08-2014 08:17:40.0 Agent type: DC

IP : 111.106.168.192 User: DOMAIN\shf Timeout: 10-09-2014 07:09:55.0 Timestamp: 10-08-2014 07:09:55.0 Agent type: DC

IP : 135.106.168.192 User: DOMAIN\mta Timeout: 10-09-2014 09:38:03.0 Timestamp: 10-08-2014 09:38:03.0 Agent type: DC


Viewing all articles
Browse latest Browse all 2011

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>