RE: Possible Intrusion?
- From: "Joseph" <cismic@xxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 12 Feb 2002 01:15:01 -0800
Not if you have setup your system to monitor for intrusion detection.
Check out how you have your configuration settings checked and make sure
That monitor for port scans is checked. Look at your documentation that
comes with ISA for more specifics.
Joseph
-----Original Message-----
From: Kevin Bryce [mailto:kb@xxxxxxxxx]
Sent: Tuesday, February 12, 2002 1:10 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Possible Intrusion?
http://www.ISAserver.org
Hi,
I am new to ISA as our company only had the system installed a few
months ago. Everything seemed to be okay, but we have started getting
the following alert, on a fairly regular basis.
"ISA Server detected an Internet Protocol (IP) half-scan attack from IP
address 64.xx.x.xxx".
Does this mean our system has been compromised?
I have scanned for viruses, but found none. I have checked and double
checked the packet filters and they also seem fine.
Any advice you can give would be greatly appreciated.
Thanks
Kevin
________________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet. The
service is powered by MessageLabs. For more information on a proactive
anti-virus service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
