To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

FSCS12 firewall warnings.

etomcat
etomcat Posts: 1,172 Firewall Master
in Business Suite

Dear Sirs,

One of our customers has a computer running F-Secure Client Security 12.00 that is not connected to the corporate LAN. It only has Wi-Fi access to a router, for connection to the public net. The computer regularly logs incidents like these:

Date: 2015-10-15  09:10:57+02:00
Host: 192.168.0.78
User account: computername\username
Product: F-Secure Anti-Virus Internet Shield (OID: 1.3.6.1.4.1.2213.25)
Severity: warning (2)
TrapNumber: 601
Parameters:
(0) 139
(1) 0
(2) 0
(3) 0.0.0.0
(4) Intrusion attempt detected

Is this something worth investigating / fixing?

I think 139 (TCP) is "Microsoft NetBIOS session services" or the "Windows File sharing and network printers access" service in F-Secure Internet Shield parlance.

Thanks in advance, Yours Sincerely:
Tamas Feher, 2F 2000 Kft., Hungary.

Comments

  • andyYkh
    andyYkh Posts: 5 Security Scout

    Hi etomcat,

     We are aware of the issue and R&D is taking a look into it. The current workaround available for the issue is to disable IDS to avoid the warnings.
     

    Thanks.
    Best Regards,
    Andy Yoon

    ..........................................................................................................................................................................................................................
    Has somebody helped you? Say thanks by giving kudos. Has your issue been solved? Mark the post using "Accept As Solution" button to let others know.

  • etomcat
    etomcat Posts: 1,172 Firewall Master
    Dear Andy,

    Please give us a status update regarding this problem. Disabling the IDS/IPS is not an acceptable long-term solution.

    Thanks in advance, Yours Sincerely:
    Tamas Feher, 2F 2000 Kft., Hungary.
  • etomcat
    etomcat Posts: 1,172 Firewall Master
    Up!
  • AndYkh
    AndYkh Posts: 1 Security Scout

    Hi etomcat,

     

    We do apologize as there was a misunderstanding that the fix will be ready in the next version. R&D will integrate the fix ASAP but we have not confirmed whether is it in the next release.

     

    Best Regards,
    Andy Yoon

This discussion has been closed.

Categories