Welcome to ISAserver.org

denying port scan attack

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> denying port scan attack

Page: [1]

Message

<< Older Topic Newer Topic >>

denying port scan attack - 6.Apr.2008 10:24:52 PM

jbonms

Posts: 89
Joined: 18.Mar.2002
From: Philippines
Status: offline

i have received an everyday port scan attack or intrusion detection from external IP address. how can i prevent this attack? Is there any way to block this certain ip address? (external ip address) is isa server capable of automatic deny once recieve an attack?

Thank you

Post #: 1

Featured Links*

RE: denying port scan attack - 26.Apr.2008 8:01:43 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

ISA is already taking care of these actions and denying them. ISA Server is just giving you an alert to know what is going on, if you are bothered from such alerts, you can disable it ( the intusion detection alert ).

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to jbonms)

Post #: 2

RE: denying port scan attack - 27.Apr.2008 9:04:33 PM

jbonms

Posts: 89
Joined: 18.Mar.2002
From: Philippines
Status: offline

how can i check if this ip address was blocked? everyday alert shows thesame ip addresss over and over again. is isa server capable of preventing this ip from port scan attack? what i want to happen is when isa detect a port scan attack from this ip, then it will automaticaly include to ip band.

(in reply to elmajdal)

Post #: 3