App Control: Why Are There Multiple Agents Showing the Same IP Address?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

When looking at "Assets" > "Computers" in the App Control console, why do we see multiple endpoints with duplicate IP addresses or the wrong IP address?

Environment

• App Control Console: All Supported Versions
• App Control Agent: All Supported Versions

Resolution

There is a network appliance between the Agent and Server which is causing duplicated IP addresses. This could be a proxy, NetScaler solutions, TCP/IP connection reuse, etc.

Additional Information

• A tool such as WireShark can show the incoming connections to the App Control Server. This will help to show which IPs are connecting to the machine and may narrow down where the incorrect IP is coming from.
• Having duplicate IP's showing in the console shouldn't cause any communication issues with the Agent.