one ip is being resolved to 2 different Application name

[BlueP]

Hello, I need your assistance as am facing a weird issue there are some alerts I've got that a user is using a bestline.VPN when I checked the user's PC and tried to monitor the logs found that the same destination IP and URL is being resolved for 2 different application name may I know how that is?

[AEK]

Hello

IP/URL to App name resolution doesn't exist.

It is the IPS engine who detects if the traffic is Baseline.VPN, Google.Service or other, by analyzing the traffic.