marcusmm8

where would i go in the pc to investigate this?i.e. it is a laptop. This also occurs when the users open/closes the laptop.

we are about to upgrade to 6.3.1, let us know if you hear back from Devs.

any solutions?

We have gotten the checkpoint connector to work on the LEM, but are we able to see user activity level? curtisi​

yes i have setup all my DCs but i still see traffic in/out on port 53 ... thoughts?

I have to use the slider to view some of the node information but then i am unable to click anything else including reset. I am using google chrome Version 50.0.2661.87 m

Thank you as always curtisi​. As far as VPN, ill open up a support ticket.

authentication package MICROSOFT_AUTHENTICATION_PACKAGE_V1_0. ProviderSID: 4776 failure reason: ErrorCode:0xc000006a (user name is correct but password is wrong). No logon type present

Now google jumping on board? https://threatpost.com/chrome-defaults-to-html5-over-adobe-flash-starting-in-q4/118109/

I have noticed the same thing and have identified that this occurs when someone VPNs. The agent node should reflect a node you recognize either by name or IP.

I would also be interested in stickers (none in the shop).

What version are you in? There is a hotfix available which impacts the partitioning for the data. We had similar issues.

curtisi​ any insight here? should i open a ticket?

One struggle i have is what type of alert (incidents and/or email notification). We have seen occasions where auditors see the incident but ask if an email also went out. Requirements are a good indicator of what to monitor (i.e. PCI). As far as nonagent devices, definitely try to capture admin activity. Syslog docs have…

I had opened a ticket with Solarwinds regarding this. They appear to be having issues internally. They provide a link for manually downloads: http://downloads.solarwinds.com/solarwinds/Release/LEM/SolarWinds-LEM-Connectors.zip

we have seen this happen in our environment and have solved the issue by identifying a specific local folder shared to "everyone". When the user tries to access a file, it tries to authenticate to the guest account. Removing the persmissions from "everyone" solved the issue. Hope this helps.

What i usually do is create a group of false positives (which is updated constantly in order to decrease false positives in reporting and also provides evidence of review). In addition, schedule a daily search report which is emailed to have evidence of report received daily summary in the morning. Once the report is…

any configuration guides for qualys connector configuration?

There are no global filters...