RE: Portscan not showing as an Alert - please help

Gents,

Can some please help me with this I am pulling my brains out...

Thanks a million

Remy


-----Original Message-----
From: Remy J. Plagmeijer 
Sent: Wednesday, November 27, 2002 9:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Portscan not showing as an Alert - please help


http://www.ISAserver.org


Hi Guys,

I have a serious problem port scans are not showing as an intrusion
alert on ISA Server. In fact the only alert I see is "packed dropped".

What am I doing wrong?

I enabled packet filtering, intrusion detection and IP routing

On the intrusion tab I selected all Intrusions.

In monitoring are alerts are enabled.

When I dail in to my ISP from a notebook and run I portscan on my public
ip address (213.84.99.150) asking for trouble?

I see no alert, the scan does show in the log.

What am I doing wrong? Please help

Remy Plagmeijer

Other related posts: