Continuous Port Scan on ISA

  • From: Vinaykumar G <G.VINAY@xxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Thu, 28 Nov 2002 22:19:45 -0800

Hi All,
      We have ISA as firewall in Integrated mode. From last one week we have
continuous Port Scan attack on our Network. Though ISA is detecting them all
and
intimating us about that. Is there anyway by which we can restrict anyone by
launching such attacks on our Network. Pls. advice.

ISA gives  following message:

From: Firewall Administrator
Sent: Thursday, November 28, 2002 6:52 PM
To: xxxxxxxxxxxxx
Subject: ISA Server alert: An intrusion was attempted by an external
user.




ISA Server detected an all port scan attack from Internet Protocol (IP)
address xx.xxx.xxx.xxx

For more information about this event, see ISA Server Help.





Regards,
Vinay.




Other related posts: