locked
Configure evnt forwarding from DC > non domain joined collector RRS feed

  • General discussion


  • I would like to configure ATA to be in a work group and external to the monitored domain. Not having SEIM I plan to use ATA to collect the events using eventlog forwarding. In the documentation, it is mentioned that the domain controllers and ATA gateways are connected to the same domain. So is my desired configuration of an ATA workgroup outside the domain not possible ?

    thanks for any information

    
    Thursday, April 7, 2016 9:19 AM

All replies

  • First of all, events must be forwarded to ATA Gateways (locally on Lightweight Gateways), not to ATA Center! ATA Center really does not need to be joined to a domain (successfully tested). But its gateways should monitor traffic/events from one domain only.
    Monday, May 30, 2016 5:58 PM