Project

General

Profile

Bug #3198

Rogue End Hosts web page reports false positives

Added by Michael Zalokar almost 7 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Start date:
12/20/2012
Due date:
% Done:

0%

Estimated time:
Duration:

Description

The issue is that dhcp end hosts behind a firewall are reported on the "Potential Rogue DHCP EndHosts" page.

The issue is that the firewall uses multiple interfaces on both the outside and inside. DHCP requests on the inside are getting stored in Infoblox with the MAC of the outward facing NIC in the firewall itself. ARP entries in routers of the DHCP IP and inward facing MAC don't match and the end host is considered rogue.

bug_report4.png (317 KB) bug_report4.png Potential Rogue DHCP EndHosts screenshot Michael Zalokar, 12/20/2012 01:22 PM


Also available in: Atom PDF