To: Arthalion
...they apparently have Ciscoworks set to alert them of any internal 445 activity... Are you blocking 445 internally as well as externally?
99 posted on
05/03/2004 3:31:55 PM PDT by
general_re
(Drive offensively - the life you save may be your own.)
To: general_re
Not if they want anything Windows networking related to work.
100 posted on
05/03/2004 3:35:06 PM PDT by
sigSEGV
To: general_re
We're blocking 445 TCP&UDP (in all directions) on our external firewalls, and on our internal firewalls to protect cross-VLAN traffic. We're also monitoring the rest of our routers and switches for traffic on those ports.
All told, it looks like our security did pretty well. The day is almost over, and that one incident seems to be the sum of todays problems. I'll knock on wood that my pager doesn't go off tonight :)
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson