Appliance access

Question

Hello, 
 what exactly does "Appliance Access" mean. 
 I see that again and again in the log of the Sophos XG. 
 This is about the NTP port or the ports 137, 68, 67. 
 How do I best deal with these ports. 
 I found a workaround for the NTP port, but the message "Appliance Access" is displayed again. 
 Does anyone have an idea for that? 
 
 greeting

Wayne Folta · Answer

Everything is probably working properly. If you are seeing appliance access denied, this is usually random machines on the net probing your network (your public IP address, the IP address of your firewall) by sending packets to a port to see if a service is running. The firewall appropriately drops them. The particular ports are usually tied to a service where there are (or we&rsquo;re at one point) vulnerabilities on some machines/OS&rsquo;s 
 The other time I see this is machines on my guest network sending broadcast messages to address x.x.x.255. Again, the firewall drops the packet appropriately. 
 No action needed on your part, if that&rsquo;s what&rsquo;s happening.

Appliance access

Top Replies