Community
Command Central
MVP Program
Monthly Mission
Blogs
Groups
Events
Media Vault
Products
Observability
Network Management
Application Management
IT Security
IT Service Management
System Management
Database Management
Content Exchange
SolarWinds Platform
Server & Application Monitor
Database Performance Analyzer
Server Configuration Monitor
Network Performance Monitor
Network Configuration Manager
SQL Sentry
Web Help Desk
Free Tools & Trials
Store
Home
Products
Network Configuration Manager (NCM)
Cirrus port scans
BryanBecker
I got an email from my security team that my Cirrus server is doing port scans on ports like udp 137 (NetBIOS). I wanted to see if this is normal behavior. I know in the inventory of the devices the TCP and UDP ports are listed. Is this what Cirrus is doing? If so what is the possibility of turning off this function?
Thanks.
BB
Find more posts tagged with
Accepted answers
All comments
greg
Brian,
Cirrus uses Winsock function calls for name resolution, which would cause the NetBIOS traffic you are seeing. This activity should not be a port scan, (checking if the port is open), but rather a legitimate request for name resolution.
This should be no different that your Orion Server.
Hope this helps,
Greg
Quick Links
All Categories
Recent Posts
Activity
Unanswered
Groups
Help
Best Of
