It's just someone port scanning you, nothing you can do about. People and companies do it for fun it seems. Andrew -----Original Message----- From: Assaad Matar [mailto:assaad78@xxxxxxxxx] Sent: Friday, January 14, 2005 10:20 AM To: [ISAserver.org Discussion List] Subject: [isalist] Intrusion Detection http://www.ISAserver.org hi all, i have an ISA 2004 with 2 NIC. First NIC is connected to the intranet and the second one is connected to a cisco firewall. i have a server used to contact satellite(for download) that is external to the network and connected externally to the firewall. ISA server use this satellite server for download connection. i receive an alert "ISA server detected an all port scan attack from IP address *******) where the ip address is that of the satellite server. can anyone help me to prevent this error thanks ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: andrew@xxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx