Dear Support,We are seeing "IP Fragment Incomplete Datagram" attack from 10.132.1.17 to 10.132.1.18 and vice versa. These servers are running in Windows 2003 OS but IPS shows IP fragment Incomplete datagram attack from above source to destination on ...

Dear Support,We have deployed Cisco IPS 4240 device which monitor only our company LAN traffic. Monitoring console shows that there are many internal IPs are contacting DNS servers wherein it shows "large ICMP traffic" as below. Let us know whether a...

Hi, We are seeing continous deny hits from one source to one destination on port 514 even though access is allowed in FWSM. Below is the logsApr 10 04:51:57 10.132.48.1 Apr 10 2011 04:51:57 JEDDCSFFWSM01 : %FWSM-4-106023: Deny udp src DMZ50:source IP...

Hi,Can any one have any idea on why we are seeing huge number of "Windows Account Locked" alert in Cisco IPS device towards only one Windows server.We checked whether Windows server is generating any malicious traffic by scanning the server but nothi...