Network Protection: Firewall, NAT, QoS, & IPS Portscan detection dooesn't work?

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 2 subscribers
Views 837 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Portscan detection dooesn't work?

Spider over 19 years ago

I have 5.208, I don't get any portscan detection logs? Any adeas?

This thread was automatically locked due to age.

0 TOHIL over 19 years ago

Do you see red indicators for an porstscan in the ids reporting? You will receive a email message, when a portscan is detectet...

notice, portscans are not realy often
Cancel
Vote Up 0 Vote Down

Cancel
0 manson over 19 years ago in reply to TOHIL

on this page you can check your system:
http://www.dslreports.com/scan

after that you should have in /var/log/portscan.log
Cancel
Vote Up 0 Vote Down

Cancel
0 bagira over 19 years ago in reply to TOHIL

I am not sure, but in version 5 PSD was integrated in Snort. Have a look in the ips-logfile!
/bagira
Cancel
Vote Up 0 Vote Down

Cancel
0 Zitronennetz over 19 years ago in reply to bagira

You can check the "port scan detector" features on this site:

http://www.alken.nl/online-security-check.htm

There are about 20 tests, some port scanners are basing on Nmap, at some sites you can check the intrusion protection. Just try them out, you should receive some "alert" emails.
Cancel
Vote Up 0 Vote Down

Cancel