Snort mailing list archives
Re: snortsam agent doesn't block ip in external firewall
From: <stephane.nasdrovisky () paradigmo com>
Date: Tue, 28 Apr 2015 09:12:37 +0200
port 18183 looks like a checkpoint (firewall-1 producer) port. I don’t know snortsam, but snortsam and checkpoint tells me something. http://platforms.infostruction.com/common-checkpoint-firewall-ports/ tells: 18183 /tcp FW1_sam Check Point OPSEC Suspicious Activity Monitor API snortsam.conf hints: remove any opsec line add a iptables line have a look at http://doc.emergingthreats.net/bin/view/Main/SnortSamREADMEconf isn’t a snortsam agent needed on your firewall? isn’t snortsam outdated?? Subject: [Snort-sigs] snortsam agent doesn't block ip in external firewall [SAM] Could not connect to (PC3addr):18183! ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- snortsam agent doesn't block ip in external firewall Daniel Lopez (Apr 27)
- Re: snortsam agent doesn't block ip in external firewall stephane.nasdrovisky (Apr 28)
- Re: snortsam agent doesn't block ip in external firewall Al Lewis (allewi) (Apr 28)
- Re: snortsam agent doesn't block ip in external firewall stephane.nasdrovisky (Apr 28)