How to enable or disable NIC bonding on the SIEM Enterprise Security Manager
Last Modified: 2022-12-12 11:23:28 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
How to enable or disable NIC bonding on the SIEM Enterprise Security Manager
Technical Articles ID:
KB83804
Last Modified: 2022-12-12 11:23:28 Etc/GMT Environment
SIEM Enterprise Security Manager (ESM) 11.x For environment information, see KB82516 - Supported platforms for Enterprise Security Manager. Summary
Network Interface Card (NIC) bonding is a supported feature with SIEM ESM. But, the product documentation doesn't cover the implementation of this feature. This article describes how to enable and disable bonded NICs.
ProblemYou want to enable or disable the support of bonded NICs on the ESM, but the ESM user interface has no options to configure it.
Solution
The ESM tries to auto-enable the bonded NIC mode when it detects two management interfaces that are both using the same IP address. When bonded mode is enabled, both interfaces are assigned the same IP and MAC address. The bonding mode used is mode 0 (round-robin). To disable NIC bonding, change the IP address of one of the interfaces so that it no longer matches the other. The system automatically disables the bonded NIC mode. NOTE: Beginning with ESM 11.5.2, you can set the bonding mode in the UI by going to Network Settings, Main tab, Bonding mode. See resolved issue SIEM-27349 in the ESM 11.5.2 Release Notes. Related InformationTo submit a new product idea, go to the Enterprise Customer Product Ideas page.
Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website. For more information about product ideas, see KB60021 - How to submit a Product Idea. Affected ProductsLanguages:This article is available in the following languages: |
|