IPv4 forwarding disabled from Logpoint v7.8.4, preventing SIEM-to-UEBA log forwarding

Reference ID: LP-73497

Date Published: 2026-03-16

Affected Product: Logpoint

Affected Version: v7.8.4

Fix Version: v7.9.0

Description:

After upgrading to Logpoint v7.8.4, IPv4 forwarding is disabled by default (net.ipv4.ip_forward=0) as part of security hardening.

In deployments where UEBA is enabled, Logpoint needs to forward traffic between network interfaces to reach the UEBA cluster. When IPv4 forwarding is disabled, the SIEM cannot route this traffic, causing SIEM-to-UEBA log forwarding to fail.

As a result, UEBA-related logs do not reach the UEBA cluster, leading to missing data in UEBA analytics and monitoring.

Workaround: Contact Support