This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Port Scan Monitoring - LEM

Hello,

I have configured a port scan alter using the in-built template in LEM.

I was wondering who else uses this alert and if they have any tips for amending the policy to receive more useful information.

Currently, I am getting a lot of "Deny TCP (no connection)"

Are there any knowledge base articles on understanding the alerts?

Many thanks