Malicious site - mis-reporting or misunderstanding?


1 comment

  • Avatar

    If the alarm has "443,22,1193" in it, it is likely outsider trying to get into your system.  The block is valid. 

    If you see something is accessing inside port that's outside of your range, it could be four possibilities

    1. the port was open by UPnP

    2. a bug in the UI

    3. a bug in the accounting system, src and dst ports are reversed. 

    4. inside host is accessing site X of port 45902


    If this happen again, send us a email, and give us support access, we can go inside and take a look 

    Comment actions Permalink

Please sign in to leave a comment.