[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW1] OT: ICMP Packets from Boundary Router in FW-1 Logs
Hi All, Sorry this is a bit off topic but I always welcome your input. I looked for a more appropriate forum but could not find one active enough. My firewall logs are showing ICMP traffic coming from the internal interface of my boundary router, destined for seemingly random addresses within my internal network. This has been occuring for some time but was only noticed when the connection to our ISP was down. The internal interface of my boundary router?? There is no evidence of a compromise of the boundary router, as the configuration has not changed, and the ICMP traffic continued while our ISP connection was down. Additionally, I was the only one logged in to our boundary router while the traffic persisted. The router is a Cisco 2514 running IOS 11.2. I know this is more of a Cisco issue, but it could also become a security issue. Any ideas or suggestions are welcome. Thanks as always, Andy ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|