This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Portscan detected despite exception.

Version 8.102

I have an exception for portscan detection for our Internal LAN.
(IE Firewall is set to ignore portscans from the LAN).

However lately I have been receiving portscan notifications, (usually in a burst) from a number of LAN machines despite the exception!?

I am in the process of checking the machines in question for malware but they seem clean so far.

Even if they were infected, why is Astaro notifying me?


This thread was automatically locked due to age.
Parents
  • Interesting.  I don't see how that can happen unless there's a glitch of some sort.  What happens if you make a new Exception for the Internal network and just select 'Portscan'?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Interesting.  I don't see how that can happen unless there's a glitch of some sort.  What happens if you make a new Exception for the Internal network and just select 'Portscan'?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data