Alarms from portscans made by Firewalla itself

Follow

Tomas Ekroth

• November 07, 2024 11:01

Hi!

I have a gold in bridge mode between my Unifi Dream Machine Pro and my main Unifi Switch. The unified switch has multiple access points and other unified switches connected to it. All unified devices are on "Infrastructure VLAN" and then I have other VLANs for main, sonos, iot etc. I use the UDM-Pro for DHCP etc.

Several times a day I receive firewall alarms from portscan activity made by Firewalla itself. The source IP address on the alarms are typically one not used, the Mac address is the Mac of the Firewalla Port 1 MAC. The destination is one of my devices. 

My conclusion is that these are the "Device Open Ports" scan made by firewalla. However, WHY THE HELL DO I GET ALARMS FROM IT?? The alarms also cannot be muted...

Anyone else has this behaviour? 

0

• 

  Firewalla

  • November 07, 2024 20:03

  Double-check if you have a switching loop. (I just replied to your other thread on slow app access) this may be one of the other issues. 

  0

  Comment actions Permalink

Please sign in to leave a comment.