IPS attacks with source IP addresses of UTM

Question

Hi, 
 
 today, i've got many IPS alerts with the source IP of UTM's LAN and WAN ports. 
 Is this normal? 
 
 Regards Meghan 
 
 P.S. The address No.1 in Screenshot 1 is the LAN IP of UTM and address No.2 is the WAN IP of UTM

sachingurung · Answer

Hi Meghan, 
 Start a thorough Anti Virus scan on the internal systems whose source IP addresses are captured in the report. Next, make sure the IPS patterns are up2date. 
 Thanks