System account showing in traffic reports
When viewing conversations, the IPInternet protocol address and username of an account created for signing SMB traffic is being displayed as generating traffic rather than the actual user generating the traffic.
When SMB signing is configured and enabled, the SMB signing account is the last user account registered as using an IP address, the Exinda AD Connector transfers the SMB signing account as the username that is generating the traffic. To ignore the SMB signing account and report the traffic as being generated by the actual user, configure the Exinda AD Connector to ignore the SMB signing account. For more information refer to Exclude specific usernames from reports.