Many IPS alerts

And is this a active Attack at my LAN or means this that a unsecure, vulnerabe website were opend?

Thank you in advance!

Hi Meghan,

Make sure you don't have the SSH and HTTPS access open for the WAN zone in Administration | Device Access. It is recommended to uncheck these access to the XG when it is not used.

Alongside, verify that the IPS patterns are up2date. This is also caused when you have hosted a server through DNAT and external attempts to access this servers are blocked by the XG.

Thanks

Hi Sachin,

SSH and HTTPS access is already closed.

I havn't got any server, only 3 Clients in the LAN, and I havn't got any DMZ.

IPS signatures already up to date.

So why there are so many intrusion attempts?

Regards Meghan

Hi Meghan, 

You may need to check the packet capture for the destination address in the intrusion list. You may find that your local host access some sites that have such vulnerability due to the outdated Web server. This does not indicate that your system is compromised and may need to investigate which URL or sites your host accessed and the reply from the server is logged by IPS policy. 

When I leave a w10 box running I get attacks on Windows. Turn the box off an no attacks.

I get continual attacks on linux and BDOS, which for the moment have stopped.

But what I don't get are blocked malware and spyware objectionable websites.

Makes taking the IPS warnings seriously hard.

Thank you for your answers!

Can you tell me finally, if I should care about?

I'm a littlebit concernd because everyday other exploits are reported, and not all IP's are solveable.

If IPS is not very helpful, should I disable this feature?

Or is UTM for Home better?

Thanks in advance - Meghan

Any ideas?

On XG a number of the alerts are false positives eg this morning I received an alert for a MS edge scripting attack, I don't have any MS PCs running at the moment.

From memory on both UTM and XG you need IPS running to take full advantage of some of the other web features. For home use the XG is okay, but not as good as the UTM.

Unless you are guarding national secrets at home the XG should provide sufficient security.