Portscan notifications

RE: Portscan notifications

BAlfson — Wed, 24 Jan 2018 13:46:50 GMT

Z, take a look at #2 in Rulz.

Cheers - Bob

RE: Portscan notifications

Alexander Busch — Tue, 23 Jan 2018 14:31:48 GMT

[quote user="zburns"]I've also thought about an auto-block - but that scared me a little bit. You could create an issue real quick by scanning yourself. :-)

[/quote]

Make an exception for your internal lan.

RE: Portscan notifications

zburns — Tue, 23 Jan 2018 12:37:55 GMT

I've also thought about an auto-block - but that scared me a little bit. You could create an issue real quick by scanning yourself. :-)

RE: Portscan notifications

Alexander Busch — Tue, 23 Jan 2018 12:22:50 GMT

Maybe this one is interessting community.sophos.com/.../115153

So a connection attempt is already enough I think. It seems the attempt is already be counted in front of the manual firewall rules.

Best

Alex

PS A nice feature of UTM would be automaticly block IPs which triggered IPS for example.