That was one of the stuck mails. Response to FW log coming... -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Thursday, March 17, 2005 10:35 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Port Scans http://www.ISAserver.org I posted yesterday with the most recent one I had, along with the firewall log entries for that same time period. Did ya see it? -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Tuesday, March 15, 2005 16:49 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Port Scans http://www.ISAserver.org This is a discussion we recently fired up in the SBS list. Port scan alerts need not be "external-specific". An internal client can trigger one for ISA 2004 just as easily. Check your firewall log for that IP address in the same time frame. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.