This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Portscan Detection Configuration Issue

Hi!

Yesterday I upgraded our ASL to version 5.011 and set the IPS to working.
We where using the Portscan Detection feature on 4.022 and it worked pretty fine. I could define networks not to be alerted as portscan origin and an action, that ASL will do (blackhole/drop).

In 5.011 this is only to be enabled or disabled...

We tested it by scanning our external IP but the traffic isn't blackholed as before!! How can I enable this again!??

I don't even get an email, as described in the help!

I really need some hints here!

Thank you!

TH

This thread was automatically locked due to age.

Parents

0 ^-^Neko over 21 years ago

It would be interesting to hear something from the astaro Team.

It is not working for me either.

Neko.
Cancel
Vote Up 0 Vote Down

Cancel
0 THoehne over 21 years ago in reply to ^-^Neko

I tested a little bit more but ASL doesn't seem to recognize any portscan! Tried different portscans on our external interface but no mail, no blackhole, no statistic!!!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 THoehne over 21 years ago in reply to ^-^Neko

I tested a little bit more but ASL doesn't seem to recognize any portscan! Tried different portscans on our external interface but no mail, no blackhole, no statistic!!!
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data