Submit a ticketCall us

Training ClassSign up for Network Performance Monitor (NPM) and Scalability instructor-led classes

Attend our instructor-led classes, provided by SolarWinds® Academy, to discuss the more advanced monitoring mechanisms available in NPM as well as how to tune your equipment to optimize its polling capabilities. NPM classes offered:
NPM Custom Monitoring and Polling
Orion Platform Scalability

Reserve your seat.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > TCP Port Scan

TCP Port Scan

Table of contents
Created by Bryan Davis, last modified by Aileen de Lara_ret on Jul 20, 2016

Views: 1,127 Votes: 0 Revisions: 3

Overview

This article provides brief information on Ndepth searches, and when they turn up TCP port scan coming from the firewall. 

Environment

  • LEM version 6.2
  • Sonicwall firewall
  • TCP Port Scan

Detail

When getting multiple port scans from a specific range of IP address, these IPs are non agent IPs not reporting to the LEM.

Find the rule fired, if no rule has been fired then the portscan alert is coming from the firewall.

 

 

 

Last modified

Tags

Classifications

Public