Mike - I was grinding my teeth waiting for the comments. However I was expecting Thor to jump in first :-) Joseph Danielsen, CSBS, MCSA-Messaging, MCP Network Blade Inc. 49 Marcy Street Somerset, NJ 08873 732-213-0600 www.networkblade.com <http://www.networkblade.com/> Ask me why a Microsoft Certified Small Business Specialist is best for your company ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross Posted At: Tuesday, May 01, 2007 3:03 PM Posted To: ISA Conversation: [isalist] Re: All Ports Scan from internal Exchange Server Subject: [isalist] Re: All Ports Scan from internal Exchange Server i just cant help it... Its's a Brick..... Hawse... sorry.. back to work now. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Tuesday, May 01, 2007 1:53 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: All Ports Scan from internal Exchange Server What other events or alerts do you find related to that server? This can happen when the server is overloaded or unresponsive (or infected). From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of ISA Sent: Tuesday, May 01, 2007 11:07 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] All Ports Scan from internal Exchange Server Hey Guys - I am getting consistent events logging an all ports scan from my internal Exchange server (pasted below). Is this unusual? If so, what should my course of action be? Thanks in advance! Joseph Danielsen, CSBS, MCSA-Messaging, MCP Network Blade Inc. 49 Marcy Street Somerset, NJ 08873 732-213-0600 www.networkblade.com <http://www.networkblade.com/> Ask me why a Microsoft Certified Small Business Specialist is best for your company All mail to and from this domain is GFI-scanned.