Hi,
i am new with IPS so i have my Problems to understand what is wrong here...
I get this Messsage every one Minute:
[1:2404:0] A NETBIOS SMB-DS Session Setup AndX request unicode username overflow attempt [Classification: Attempted Administrator Privilege Gain] [Priority: 1]: {PROTO006} 10.2.1.50:1378 -> 10.1.1.196:445
First IP Adress is our SAP Server in Austria, second is our WINS Server in germany. The SAP Server dont have our WINS in his TCP/IP settings. The SAP Server has the austrian WINS Server. I dont know where he get this IP Adress.
What can be the problem?
Thx in advance!
Basty
This thread was automatically locked due to age.