LAN to WAN Attack in Secureport
Options
Freshman MemberSecureport shows an "Attack" with the Source address being one of my internal workstations (192.168.nnn.nnn), and the destination a WAN address: 138.201.57.222.
I am not able to identify the purpose of the connection to 138.201.57.222
Nor can I identify why Zyxel considers the connection an "Attack".
How do I find out why is this considered an "Attack"?
What is 138.201.57.222?
0
All Replies
-
Hi @GeoGuyOwoWelcome to Zyxel community.You can refer to the below forum discussion link:The cause is that the session was initiated by the host (192.168.nnn.nnn) on your LAN side andaccessed the data from the destination WAN IP(138.201.57.222),then Zyxel UTM engine identified this behavior might be a malicious attack so blocked it.You can check it belongs to which attack type on the category item such as ADP, IDP, etc.
You may provide the screenshot to us. Thanks.0
Zyxel Employee
Categories
- All Categories
- 442 Beta Program
- 2.9K Nebula
- 220 Nebula Ideas
- 128 Nebula Status and Incidents
- 6.5K Security
- 603 USG FLEX H Series
- 344 Security Ideas
- 1.7K Switch
- 84 Switch Ideas
- 1.4K Wireless
- 52 Wireless Ideas
- 7K Consumer Product
- 298 Service & License
- 482 News and Release
- 92 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.8K FAQ
- 34 Documents
- 87 About Community
- 105 Security Highlight
