TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

All,

I know it's unsupported, but situtation demands I run 4 RS 6.5 network
sensors on a single box (Sun Netra T-1 w/quad NIC, very low traffic vlans so
we're not worried about the load on the box). After installation, the first
2 instances connect up to the console just fine (again RS 6.5) and
immediately start throwing events. Sensors 3 & 4 can connect to the control
channel, but consistently fail to connect the Event channel. The error is
the classic "the sensor is not being monitored by the Event Collector,
therefore thou shalt not monitor any Events blah blah . . ".

I know how to avoid this error, have done so on literally every other sensor
I monitor. Used the Deployment Wizard to add the sensors to the Event
Collector. Worked fine, no errors. After I do that, I immediately go the
the Managed Assetts window and try to add the sensor. Same error. Repeat
ad nauseum, same result. Delete the asset, delete the Event Source from the
Event Collector properties, start over.

Has anybody out there in ISS-land ever made this configuration work?

Many thanks!

Jeff

Jeffrey Boggie
Connexion by Boeing
Digital Networks
Security Design & Integration
425-393-2944
425-359-4844 (cell)
jeffrey.l.boggieboeing.com

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]