All Port Scans, false positive
- From: "Amy Babinchak" <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 14 Sep 2005 12:29:59 -0400
A question comes to me and I don't have the answer but I know that you
guys will. If I have a router in front of my ISA/SBS server that only
allows 4 ports through, how is it that all port scans are reported from
IP addresses at Microsoft and the ISP on my ISA server? Is it a false
positive? If so, what in the world causes it when there are only 4
accessible ports?
Amy
Harbor Computer Services
Small Business Computer Specialists
Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
Other related posts:
