M86 Security M86 IR Enterprise Reporter User Manual page 55

A S C 2: C ER S
DMINISTRATOR ECTION HAPTER ONFIGURING THE ERVER
W
ARNINGS
The ER will generate NetBIOS requests outside the network if
IP.ID is activated and if no segment settings have been specified
in the configuration of the Web Filter—causing it to log external
traffic. To resolve this issue, the Web Filter should be modified to
log activity only within the network. If a firewall is used, it should
be set up to prevent logging NetBIOS requests outside the
network.
If using IP.ID, note that user login times are established for set
periods of 15 minutes, and if more than one user logs onto the
same machine during that time period, the activity on that
machine will be identified with the first user who logged onto that
machine. For example, the first user logs on a machine for three
minutes and then logs off. The second user logs on the same
machine for 11 minutes and then logs off. The first user logs back
on that machine for 16 minutes. All 30 minutes are logged as the
first user's activity.
49
M86 S U G
ECURITY SER UIDE