Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Strange log - Originating from against

Hi,

I found a strange and recurring log "originating from against" for the blade IPS - see screenshot

originating-from-against - anonymous.jpg

No behavior, but a lot of this for all our firewall.

Firewall and MGMT are running version R80.20

 

Any idea for that point ?

Thanks,
Arthur

0 Kudos
5 Replies
Highlighted
Sapphire

There is not much that can be said when the only detail we know here is the version 😎

Highlighted

Indeed, but what I can says... 

We get this message from all firewall without an apparent reason.

 

Do you have already see this message ?

0 Kudos
Highlighted
Sapphire

Look into the logs in SVTracker - look for logs from the same source at the same time...

0 Kudos
Highlighted

OK so I try to find the same log with SVTracker, but no way to find it.

Regarding the othe logs from the same origin, we have a lot of accept and Drop (about 1600 entry for the same second) - icmp/tcp/udp - but only from the firewall blade.

 

This is the only log from IPS blade at this exact time from this specific origin.

0 Kudos
Highlighted
Admin
Admin

Might be worth a TAC case.
0 Kudos