"Victim Name" and "Attacker Name" in Monitor / Logs / Threat

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

"Victim Name" and "Attacker Name" in Monitor / Logs / Threat

Not applicable

Does anyone know where I would configure an IP address to resolve to an attacker name or victim name?  I can't seem to locate it in the documentation and tried adding it in Objects > Addresses. victim_name

1 REPLY 1

L7 Applicator

The "resolve hostname" checkbox does a reverse DNS lookup to the firewall's configured DNS server(s). You could add the RDNS entry on the DNS server in question and it should resolve the addresses in question.

You can also create Address Objects, which will resolve as well as long as it is configured as a /32.

Hope this helps,

Greg

  • 1830 Views
  • 1 replies
  • 0 Likes
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!