IBM Support

SiteProtector System does not display correct IP address for Network Security appliance in NAT environment

Question & Answer


Question

How do you change the IP address displayed for an IBM Security Network Protection appliance in the SiteProtector System asset view to the overridden IP address when the appliance is operated from behind a NAT?

Answer

If you are managing the Network Security appliance using the SiteProtector System in a NAT environment, you can enable the Override SiteProtector Contact Settings to allow the SiteProtector System to contact the appliance through NAT port forwarding. However, the asset view still displays the private NAT address. Deploy the Advanced Tuning Parameters policy with the following value to show the overridden IP address in the SiteProtector asset view:

spad.reportoverrideip = true

If you have installed firmware update 5.3.1.1 or later, change the following tuning parameter to show the overridden IP address in the SiteProtector Event Details window:

events.response.sp_post.mgmt_ip_address = <Global IP address to override NAT IP address>

Note: This IP address must be the same IP address specified in Override SiteProtector Contact Settings on the SiteProtector Management Settings page.
 

[{"Product":{"code":"SSHLHV","label":"IBM Security Network Protection"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"General Information","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.3.1;5.3.2;5.3.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}},{"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"5.4","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
23 January 2021

UID

swg21884020