Hi there,
I am a new administrator that has inherited a Sophos UTM 9 installation and we are getting thrashed with port scan alerts. I suspect this is just script kiddies that are now on holiday trying to find a way in, but we are getting hundreds of alerts from the same device for the same source IP.
Is there a way to reduce the amount of alerts that are sent, or the frequency of alerts ( eg, every 50th scan) so I can reduce the amount of alert spamming?
Regards,
New Guy
This thread was automatically locked due to age.
