Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 16 subscribers
  • Views 3102 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SOPHOS INTERCEPT X - PORT SCAN DETECTION

ORLANDO GONZALEZ1

Greetings very good afternoon community!

I have a question.
Is the endpoint capable of detecting and reporting a port scan? That it has been executed on the network and towards computers that have the Endpoint installed? I have seen that the Sophos Firewall does detect them but I have no endpoint alerts



This thread was automatically locked due to age.
Parents
  • 0

    I do not believe Intercept X is currently configured to detect local port scans. In theory, it's possible that the IPS engine (in early access) might be able to detect scans. However, I don't know that SophosLabs has prioritized this over more urgent network protection like lateral movement of malware or command & control traffic.

Reply
  • 0

    I do not believe Intercept X is currently configured to detect local port scans. In theory, it's possible that the IPS engine (in early access) might be able to detect scans. However, I don't know that SophosLabs has prioritized this over more urgent network protection like lateral movement of malware or command & control traffic.

Children
No Data
Unfiltered HTML