I hope this thread is in the appropriate location. Currently our network is secured using the Cyberguard Snapgear SG530 network VPN/Firewall. My question is: how can i configure this to provide maximum security? Secondly, I have noticed that there are MANY (several hundreds) of remote IPs scanning the device. Mostly, scans occur at port 80 as "http". Some, however, are at port 111 as "sunrpc", some at port 1524 "as ingreslock", port 110 "pop3", and port 143 "imap". I have entered some of the IPs in "IP Trackers" and have found them to be located in various countries around the world. Is there a reason to be concerned, how can I improve security? Thank you, Ax1om
Hi Ax1om, I cannot help you with your settings as I do not have access to the hardware. For you concern of;- Most will be classed as background noise and nothing to worry about. I see many logs and they usually have similar, and as the packets/scans are going to closed ports I just ignore them. - Stem