Editing IC Global Filter stops sending events to FW

Alex- — Wed, 27 Oct 2021 07:29:49 GMT

Identity Collector version 81.023.

I had a couple of times times the occurence that modifying anything in the Global Filter would stall the agent, even for something as simple as adding an account or subnet in the exclusion list.

It wouldn't show any new events and send anything to the FW. Hits would ramp up as soon as I removed the change done in the global filter and identities would reappear in the gateways.

Creating a gateway-specific filter does not show this behaviour. I don't find specific caveats for the Global Filter in the documentation so I wonder if I would be missing something there.

Re: Editing IC Global Filter stops sending events to FW

PhoneBoy — Fri, 29 Oct 2021 15:51:58 GMT

@Royi_Priov

Re: Editing IC Global Filter stops sending events to FW

Chris_Atkinson — Sun, 31 Oct 2021 01:08:51 GMT

For information the latest Identity Collector version is 81.028 available from sk134312.

topic Re: Editing IC Global Filter stops sending events to FW in Firewall and Security Management

Editing IC Global Filter stops sending events to FW

Re: Editing IC Global Filter stops sending events to FW

Re: Editing IC Global Filter stops sending events to FW