Kerio, what does this log intrusion mean?

Discussion in 'other firewalls' started by Slovak, Mar 21, 2004.

Thread Status:
Not open for further replies.
  1. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    I just looked at my statistics for Kerio v4.x.x and it says two medium intrusions in the last hour, so when I look at the log it says this....
    ICMP L3retriever ping under description, and says it came from a comp in my network, reference url www.whitehats.com/info/IDS311 and the attack class was an attempted recon, medium priority, action dropped.
    What does all this mean?
     
  2. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    It looks to mean when the action was dropped it blocked the intrusion. It looks as if the firewall is working.
     
Loading...
Thread Status:
Not open for further replies.