DHCP - Getting info on allocated IPs

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

DHCP - Getting info on allocated IPs

L0 Member

We have our PA-500 setup on our company's public network.  This network is used by employee's personal machines and clients machines when they come into our office.

We have run into a few situations that we can see someone is most likely infected as the machine has been profiled by the PA-500 as transmitting threat traffic.  The problem is we only have an IP address of the machine that is doing the talking.

Wondering if there is a way to get things like hostname, OS and version or any other easily identifiable information to find the infected machine.

Thanks

1 ACCEPTED SOLUTION

Accepted Solutions

L6 Presenter

SInce you are handing out IP addresses via DHCP, you will have the Mac address of the machine that is having this IP address. Apart from the MAC address PA-500 does not have any information like OS or any other information. If you have global protect in your network then PA-500 will have the information like hostname,OS, wether the machine has any antivirus software and so much other information.  At DHCP level I can only think of MAC address. You can always allocate same IP to that machine based on MAC address and you can block this IP traffic.

View solution in original post

1 REPLY 1

L6 Presenter

SInce you are handing out IP addresses via DHCP, you will have the Mac address of the machine that is having this IP address. Apart from the MAC address PA-500 does not have any information like OS or any other information. If you have global protect in your network then PA-500 will have the information like hostname,OS, wether the machine has any antivirus software and so much other information.  At DHCP level I can only think of MAC address. You can always allocate same IP to that machine based on MAC address and you can block this IP traffic.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!