Http Errors in VPN Logs

[k.mahmood]

Hi,

I am having very strange type of errors for our Webvpn users in the logs below:

11405 03/24/2005 22:45:35.080 SEV=4 HTTP/50 RPT=58 81.158.96.133

HTTP 404 Not Found (/_vti_inf.html)

11406 03/24/2005 22:45:35.160 SEV=4 HTTP/50 RPT=59 81.158.96.133

HTTP 404 Not Found (/_vti_bin/shtml.exe/_vti_rpc)

I do not know why its being generated.

Also, our VPN3000 has been rebooted itself without any reason. Since then I can see these logs.

need help urgently please.

Any thoughts will be welcome.

regards

Khaleefa

[sstudsdahl]

The log messages that you are seeing are not a result of anything the webvpn client is doing. Those specific requests are associated to Microsoft Frontpage and it is quite common for vulnerability scanners to look for this given the number of issues that have existed with Frontpage.

Steve

[k.mahmood]

Hi Steve,

Many thanks for your reply. I have checked the details and you were right.

regards

Khaleefa