There have been known exploits to Compaq Insight Manager, so if you do need
to use it, make sure you are blocking access to these servers on that
port from the Internet...
Steven Schuster wrote:
> The port 2301\udp broadcast is used by the Compaq Insight Manager to know
> what other servers are also running the Compaq Insight Web Agent. When you
> go to the server on http:\\myntserver:2301, you will also get a list of all
> of the other servers that are running the web agent. This list is updated by
> the 2301\udp broadcasts. Steve Schuster, CCSE, CCNA
> Midwest ISO
> Security Analyst
> -----Original Message-----
> From: Tony Wong [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, March 01, 2001 3:44 PM
> To: [EMAIL PROTECTED]
> Subject: [FW1] drops on port 2301
>
> I am getting a lof of drops on service 2301, nbname, all udp packets for rule
> 0 and destination 255.255.255.255 . I am not logging implied rules and the
> first rule in my rulebase is: to drop bootp, NBT and ident protocols and no
> logging. Any ideas?
--
Steven Lee, CISSP (206) 762-4000 x104
Senior Network Security Engineer (206) 762-4400 FAX
AVCOM Technologies, Inc. (800) 817-9525 Pager
4636 E Marginal Way S, Ste B-100 http://www.avcom.com
Seattle, WA 98134-2383 mailto:[EMAIL PROTECTED]
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
