[Arthalion]

We're blocking 445 TCP&UDP (in all directions) on our external firewalls, and on our internal firewalls to protect cross-VLAN traffic. We're also monitoring the rest of our routers and switches for traffic on those ports.

All told, it looks like our security did pretty well. The day is almost over, and that one incident seems to be the sum of todays problems. I'll knock on wood that my pager doesn't go off tonight :)

[general_re]

Score one for the good guys ;)