Unknown device in Quarantine that did not pull an IP and no activity?

Follow

Justin St. Marie

• October 23, 2024 12:31

I have a new alert this morning that a device connected to Firewalla at 2AM but was quarantined.  It appears to come from an HPE MAC, but says "No IP Address."  The workflows are also 0 Bytes up, down, and total.

I'm not sure what's going on with this one, but it's not a device that I have.  Is this an error?  Shouldn't it at least have a few bytes of traffic for *something*?

0

• 

  Firewalla

  • October 23, 2024 15:34

  It may have a ipv6 address. You can go to devices and search by the MAC address, see if it is there or not. 

  0

  Comment actions Permalink
• 

  Justin St. Marie

  • October 23, 2024 17:49

  It did have an IPv6 address.  It's been offline for quite a while though, is there any way to figure out what this was?  Maybe which SSID it came through, or if it was wired?

  0

  Comment actions Permalink

Please sign in to leave a comment.