Hi
This is aimed at the endpoint agent only so please do not think of a work around involving other DSS components. So the infrastructure only includes a Manager and a endpoint agent (on a workstation).
When using an application like FileZilla and an incident is created, the incident properties doesn't display a destination field. Only information you will see is Channel, in this case Endpoint Application, and then an Application name, in this case FileZilla FTP Client.
The only way to detect FTP traffic using FileZilla is through the Endpoint Application Channel, but there is no destination, so you will never know to which IP or host files are uploaded to.
Therefore this is a feature request to add and actual destination (IP/host).
Cheers
C.