i am seeing a ton of the following alerts from Astaro 5 (latest).
[1:2466:0] A NETBIOS SMB-DS IPC$ share unicode access [Classification: Generic Protocol Command Decode] [Priority: 3]: {PROTO006} 209.187.47.244:2571 -> 192.168.250.2:445
i don't have a NAT or FW rule for this service... why am I seeing these? How can I tell which of the public addresses this is hitting?
This thread was automatically locked due to age.