Look in the logs; those scans were blocked already. Jim Harrison MCP(NT4, 2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the book! ----- Original Message ----- From: "Lalo Perez" <lalo.perez@xxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, December 12, 2001 08:41 Subject: [isalist] Deny Port Scan http://www.ISAserver.org What is the best way to deny/block port scanning? My event viewer has several messages that it detected a port scan from a public ip address. Any help is greatly appreciated. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')