When viewing conversations, the IP address and username of an account created for signing SMB traffic is being displayed as generating traffic rather than the actual user generating the traffic.
When SMB signing is configured and enabled, the SMB signing account is the last user account registered as using an IP address, the Exinda Active Directory Connector transfers the SMB signing account as the username that is generating the traffic. To ignore the SMB signing account and report the traffic as being generated by the actual user, configure the Exinda Active Directory Connector to ignore the SMB signing account. See Exclude specific usernames from reports.
|
|
|