Submit a ticketCall us

Training Class Getting Started with SolarWinds Backup - February 28

This course offers customers an introduction to SolarWinds Backup, focusing on configuring the backup technology, taking backups, data restoration and data security. It is a great primer and will get you up to speed quickly on SolarWinds Backup.
Register for class.

Home > Success Center > Log & Event Manager (LEM) > TCP Port Scan

TCP Port Scan

Table of contents
Created by Bryan Davis, last modified by Aileen de Lara_ret on Jul 20, 2016

Views: 923 Votes: 0 Revisions: 3

Overview

This article provides brief information on Ndepth searches, and when they turn up TCP port scan coming from the firewall. 

Environment

  • LEM version 6.2
  • Sonicwall firewall
  • TCP Port Scan

Detail

When getting multiple port scans from a specific range of IP address, these IPs are non agent IPs not reporting to the LEM.

Find the rule fired, if no rule has been fired then the portscan alert is coming from the firewall.

 

 

 

Last modified

Tags

Classifications

Public