I have three Windows 2003 servers behind a firewall that is NATed to a single IP address. I am using Snare to send the logs to ELA. I am having problems configuring ELA to accept the event logs since it sees them as coming from the same IP. Any help would be appreciated.