Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chris Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Server 2008 security event logs

Status
Not open for further replies.

pinkpanther56

Technical User
Jun 15, 2005
807
GB
I've just updated a 2003 DC to 2008 and have added a new clean installed 2008 DC. I've left the firewall on for now and the DC seems to be functioning but i'm seeing loads of audit failures in the security log relating to the firewall.

Can anyone shed any light on if it's something I have not got set correctly on the firewall or if it's something I should worry about? Both source and destination addresses are on the local subnet.


Code:
The Windows Filtering Platform blocked a packet.

Application Information:
	Process ID:		964
	Application Name:	\device\harddiskvolume1\windows\system32\svchost.exe

Network Information:
	Direction:		Inbound
	Source Address:		*.*.*.17
	Source Port:		389
	Destination Address:	*.*.*.18
	Destination Port:		1331
	Protocol:		6

Filter Information:
	Filter Run-Time ID:	70087
	Layer Name:		Receive/Accept
	Layer Run-Time ID:	44

Thanks.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top