AnsweredAssumed Answered

Collection from Multiple Interfaces?

Question asked by Deepanshu Sood on Mar 9, 2016
Latest reply on Mar 17, 2016 by Deepanshu Sood


Hi,

 

The scenario is the customer have two DC in their environment and they want both to be integrated with RSA SA. Now the thing is on the first interface, i.e,, em1 of the log decoder I had assigned an IP Address and added the same IP address in the host & services tab of RSA SA and after the logs are coming.

Now the customer wants that the logs from the second DC to be captured from the second interface em2 of log decoder not from the em1, and the connection would point to point from the DC2 core switch to our log decoder em2 interface, but the issue I'm facing in this case is that if I change the IP address of the second interface (which is already configured) then the em1 interface also gets down.

The reason why the customer wants the P2P connection from their DC2 core switch to log decoder 2nd interface, because in between there are almost 3-4 f/w and multiple switches in between the 2 DC's connectivity, so they don't want the link to be choked from high traffic and also don't want the unnecessary traffic to be travel from the firewall & switches which are not required.

 

Could someone suggest how we can collect the logs from both the interfaces at the same time?

Thanks in advance.

 

Regards,

Deepanshu Sood.

Outcomes