Submit a ticketCall us

Quickly Address Software Vulnerabilities
Patch Manager is an intuitive patch management software which extends the capabilities of WSUS and SCCM to not only patch Windows® servers and workstations, and Microsoft® applications, but also other 3rd-party applications which are commonly exploited by hackers. Learn more about our patch management solution.

 

Home > Success Center > Log & Event Manager (LEM) > TCP Port Scan

TCP Port Scan

Table of contents
Created by Bryan Davis, last modified by Aileen de Lara on Jul 20, 2016

Views: 57 Votes: 0 Revisions: 3

Overview

This article provides brief information on Ndepth searches, and when they turn up TCP port scan coming from the firewall. 

Environment

  • LEM version 6.2
  • Sonicwall firewall
  • TCP Port Scan

Detail

When getting multiple port scans from a specific range of IP address, these IPs are non agent IPs not reporting to the LEM.

Find the rule fired, if no rule has been fired then the portscan alert is coming from the firewall.

 

 

 

Last modified
22:29, 19 Jul 2016

Tags

Classifications

Public