Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Log & Event Manager (LEM) > TCP Port Scan

TCP Port Scan

Table of contents
Created by Bryan Davis, last modified by Aileen de Lara_ret on Jul 20, 2016

Views: 161 Votes: 0 Revisions: 3

Overview

This article provides brief information on Ndepth searches, and when they turn up TCP port scan coming from the firewall. 

Environment

  • LEM version 6.2
  • Sonicwall firewall
  • TCP Port Scan

Detail

When getting multiple port scans from a specific range of IP address, these IPs are non agent IPs not reporting to the LEM.

Find the rule fired, if no rule has been fired then the portscan alert is coming from the firewall.

 

 

 

Last modified

Tags

Classifications

Public