RE: Portscan not showing as an Alert - please help
- From: "Remy J. Plagmeijer" <remy@xxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 28 Nov 2002 19:31:31 +0100
Gents,
Can some please help me with this I am pulling my brains out...
Thanks a million
Remy
-----Original Message-----
From: Remy J. Plagmeijer
Sent: Wednesday, November 27, 2002 9:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Portscan not showing as an Alert - please help
http://www.ISAserver.org
Hi Guys,
I have a serious problem port scans are not showing as an intrusion
alert on ISA Server. In fact the only alert I see is "packed dropped".
What am I doing wrong?
I enabled packet filtering, intrusion detection and IP routing
On the intrusion tab I selected all Intrusions.
In monitoring are alerts are enabled.
When I dail in to my ISP from a notebook and run I portscan on my public
ip address (213.84.99.150) asking for trouble?
I see no alert, the scan does show in the log.
What am I doing wrong? Please help
Remy Plagmeijer
Other related posts:
