abnormal udp traffic detected, source port is zero

ZdenekB

I install new fw 4.35 on ZyWALL 1100 and now I see in log alert 

Security Policy Control

- abnormal udp traffic detected, source port is zero, DROP

what is port "zero" ? Where I config this rule ?

Thanks Zdenek

Zyxel_Emily

Hi @ZdenekB,

When device receives a UDP/TCP packet with source port zero or destination port zero, the device will drop this packet and generate a log.

This behavior is a MUST for ICSA firewall certification, so the logs cannot be turned off and it is not configurable.

Zyxel_Emily

Hi @ZdenekB,

When device receives a UDP/TCP packet with source port zero or destination port zero, the device will drop this packet and generate a log.

This behavior is a MUST for ICSA firewall certification, so the logs cannot be turned off and it is not configurable.