000014169 - Why BackOffice cases have no IP addresses  Null_IP? - RSA Adaptive Authentication (Hosted)

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000014169
Applies ToIP address is one of the important component in risk evaluation so absence of it might affect the risk score. 
RSA Adaptive Authentication (Hosted)
Not all transactions will contain an IP address, and the reasons could be due to:
  • SOAP parameter is not implemented properly.
  • IP Proxy for certain ISPs may block IP addresses from being collected.
  • Certain devices may be configured to block sharing the IP Address.
ResolutionOperations can provide a report on NULL IP by date and channel to help the customer understand the extend of the issue.
The customer may want to investigate if certain sources alway exlude IP addresses, may sure that their SOAP is implemented properly.
NotesNull_IP numbers can trigger an Operations Monitoring Alert at a variable threshold running for 7 days and expressed as a %Null_IP.  This usually leads to a customer case being created.
Legacy Article IDa67488