• Port Scans

    Hello, Since my IP is in Germany, in the firewall country-blocking I turn Germany "From", but immediately I get a lot of port scans from different German IPs. How can I resolve this conflict so that my exchange speed doesn't slow down and I don't…
  • Masse an Benachrichtigungen tunen (speziell WARN-856)

    Hi, kann man die Masse der Benachrichtigungen, speziell für Portscans [WARN-856] irgendwie tunen? Es macht einfach keinen großen Sinn 100 und eMails in einer Minute dazu zu bekommen. Grüße Marc
  • Blackhole route for IP, still having portscan alerts

    Hi, i get more and more frequent portscan alerts running for multiple hours. I would like to block them manually on an IP basis. I created a network group populated with bad IP addresses and implemented this as a blackhole route, but still having…
  • Numerous portscan warnings - from within network

    I turned on portscan notifications, and have been receiving hundreds of alerts. The strange thing is, lots of them are from internal IPs. Eg: A portscan was detected. Details about the event: Time.............: 2016-08-05 06:12:01 Source IP address…
  • How can I blackball a subnet and stop the UTM from spamming me?

    I run UTM 9.350-12 with a Home license. The UTM sends me email notifications whenever certain suspicious ectivity occurs, and if I see one particular address or subnet appear more than a couple of times, I add them to my list of "Known offenders," which…