Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Subscribers 29 subscribers
  • Views 401 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unknown hostname everywhere except DHPC lease lease view?

shred

I’ve noticed pretty much anywhere in the Sophos XG web UI it will show IP addresses with “Unknown hostname”, yet in the DHCP lease view it shows the actual hostname for each IP address. For example, in the ATP report view, it shows the IP address of a client that ATP blocked and underneath the IP address it just says “Unknown hostname”, but it’s clearly not unknown as it shows up fine in the DHCP lease view. Any particular reason for this?



This thread was automatically locked due to age.
  • 0

    Hi : AFAIK, the hostname is in context of "Synchronized security" and if you have enabled the same and if any ATP alert has been triggered at that time over dashboard you will be able to see the IP and hostname of that end point. 

    Reference snapshot:



  • +1

    This is caused by the unrelated database behind such modules. The DHCP Module uses a database and the Reporting using a own database. 

    The story for the future is to use Central as a Database for everything (also Endpoints and other tools). So we do not need to use the relation between XG DHCP and for example ATP. We can simply extract the hostname of the Client, causing this ATP alert by the endpoint directly (including more information). 

    This is already possible with Central Firewall reporting.