This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG-6.x machines portscanning main ASG?

Hello,

we have one main ASG-6-Server (v6.311) guarding our internet-connection.

There are 3 other machines with ASG-6.311 in our LAN. Since I configured the subordinate ASGs to "prefetch up2dates automatically" and to use our main ASG as upstream-HTTP-proxy, the main ASG is warning about portscans from the subordinate ASGs.

What's wrong, and how do I fix this?

This thread was automatically locked due to age.

Parents

0 SilverOne over 18 years ago

You have to allow the other devices to (check) the status off the Main ASG!

Rule:
Source:subordinate ASGs
service:PING
Destination:External (Address)
ALLOW (temporary LOG for "Live LOGinG)
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 SilverOne over 18 years ago

You have to allow the other devices to (check) the status off the Main ASG!

Rule:
Source:subordinate ASGs
service:PING
Destination:External (Address)
ALLOW (temporary LOG for "Live LOGinG)
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 thtran over 18 years ago in reply to SilverOne

Well, the subordinate ASGs don't do portscans on the external interface.
Anyway, I allowed ICMP ping echo request to the subordinate ASGs.

Let's see if that helps... (will tell you tomorrow)
Cancel
Vote Up 0 Vote Down

Cancel