RSA Admin

Denied to EnVision syslog requests from 1.1.1.1

Discussion created by RSA Admin Employee on Oct 29, 2010
Latest reply on Nov 15, 2010 by RSA Admin

My system has gotten seven "denied to enVision" alerts that show address 1.1.1.1, port 58492 is being denied trying to talk syslog 514 to this one collector.

 

A firewall's generating the denial.

 

My question is, might 1.1.1.1 be some kind of loopback address?  When I run netstat -an on the collector, I don't see this address active.

 

--== John

Outcomes