Hi, as Eero said, you can register your agents with ANY instead of the IP.
anyway, remember that the agents send the alerts in real time. *Alerts are not stored to be sent later*. So, you are not going to receive the alerts generated in your agents when they were not connected to the Manager network. Regards. On Tuesday, September 13, 2016 at 11:23:56 AM UTC+2, Eero Volotinen wrote: > > You can use ip address any while creating agent keys for roaming devices. > > Eero > > 2016-09-13 10:58 GMT+03:00 Nick Giannoulis <[email protected] > <javascript:>>: > >> Hi all >> I have an OSSEC server running perfectly monitoring all my servers. I >> want to expand it to start monitoring my 'normal' clients ( win7-10 laptops >> and workstations ) . Some of these laptops will be outside of the network >> most of the time. Considering that ossec agents shouldnt have the same IP >> is there any work around for my situation ? i imagine at some point or >> another a few laptops will have the same IP while they are connected to >> various other networks. >> >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/d/optout. >> > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
