Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SonicWall "Possible" SYN Flood attacks; numerous.... Danger??

Status
Not open for further replies.

kevnad1966

IS-IT--Management
Nov 9, 2009
2
US
I saw this question posted in another closed thread, but there was no response from the original poster.
I am a new SysAdmin and have inherited a SonicWall firewall; I was looking at the live logs and puckered up pretty quickly seeing all the bright yellow "Possible SYN Flood attack" messages, all from inside out LAN.
I looked at the System page and CPU is ~1.5% usage so they are not bogging down the box at this point, but are of some concern.

Have an NSA 3500, the FW is SonicOS Enhanced 5.5.2.1-5o
 
The the sonicwall is probably being over sensitive. However, it's best to check and as they are from inside you can trace the machines back via IP/MAC Addresses and see if there is anything funny going on.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top