Hello!
I'm running FW-1 and I'm seeing packets from one of the firewalls
to the HP Openview server which have the source port of SNMP and the
destination port is high-numbered.
Am I'm correct in believing that those packets are answers from
the FW-1 to Openview's SNMP polls? If so, why does FW-1 log them as new
connections when the connection is started by Openview (yes, I know that
UDP is connection-less, but FW-1 is supposed to create a virtual
connection)?
Any hint would be greatle appreciated.
Thanks!
-- p.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
