Jump to content


Photo

ALE Ports

ALE

  • Please log in to reply
1 reply to this topic

#1 gbrougham

gbrougham

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 10 March 2015 - 04:40 PM

I'm unsure if someone can answer this question or not, but after using ALE (free) for a few months we noticed that we were seeing a lot of traffic to the machine it is loaded on.

All of the traffic appears to be coming across port 1027. When we stop ALE, the traffic stops. Start it up again and the traffic starts.

We have set the program up to communicate with all of our DC's yet the machine that the software is loaded on is not a DC.

Does anyone have any knowledge on the ports used by ALE, and why it would generate this type of traffic

 



#2 jeffb

jeffb

    Advanced Member

  • Administrators
  • PipPipPip
  • 384 posts
  • Gender:Male

Posted 11 March 2015 - 12:31 PM

gbrougham,

 

While the Netwrix server is not on a domain controller it still has to talk to all domain controllers.  Also, by default it communicates with all workstations which are the source of invalid logins in order to collect invalid login event logs.  Typically when someone has problems with network traffic it is the workstation traffic that causes them problem.  This can be mitigated however examinations with the product will be less usefull if workstations cannot be examined.  In order to turn off collection of event logs from workstations please follow the following KB article: https://www.netwrix.com/kb/1531

 

-Jeff







Also tagged with one or more of these keywords: ALE

0 user(s) are reading this topic

0 members, guests, anonymous users