jurusam

Me too… … and >600 emails with CDR !!!! # File name hash Type Occurences Update time 1 windowsdesktop-runtime-6.0.16-win-x64_b5158efdf04bc521d4d4f0618 5107b5f5a31e086796446ed3df572838 Suspicious 194 2023-04-12 09:59 2 dotnet-runtime-6.0.16-win-x64_9525ba632a628128ec7113ac9d34fe1c2 5a44d8accd7e7ed333940f4600919f53…

If this "access block" would cause problems with the connection - I would disable the rule. But now there is only warning in ATP device. I prefer to enable this rule to protect against other true port scans

VPN connection is stable (I think) - users didn't say that have problem. Today I have 4 vpn clients connected (Windows, Mac and Android) - working with RDP or http browsing of local web. With each of this connection there is log warning of "udp port scan" with action "access block". I tried with authentication of local ATP…

I already wrote about it - I have enabled that feature - - it doesn' work …todays logs:

I wrote this in the wrong category - it should be in the Security category - someone could change it