• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Under attack?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> Under attack? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Under attack? - 1.Feb.2006 12:17:39 AM   
fsantos

 

Posts: 23
Joined: 15.May2003
Status: offline
Hello! I installed recently ISA 2004 and I was monitoring the server today and noticed SecureNAT sessions from the External network. I was expecting that all SecureNAT sessions would have a source network of Internal.

Does this mean I am under some kind of attack?

Fsantos
Post #: 1
RE: Under attack? - 1.Feb.2006 1:35:26 AM   
ClintD

 

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline
If you have any Server Publishing rules configured, they'll show up this way.

(in reply to fsantos)
Post #: 2
RE: Under attack? - 1.Feb.2006 8:36:03 AM   
fsantos

 

Posts: 23
Joined: 15.May2003
Status: offline
Thanks for your help. I'm more relaxed now :) I do have a website published.

Anyone recommend a good test to see if the firewall is not "leaking" anything?

I usually try grc.com and we also subscribe to scanalert.com by I was wondering if this is what an ISA 2004 guru would use.

Any tips?

fsantos

(in reply to ClintD)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> Under attack? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts