Hi All,
Sorry this is a bit off topic but I always welcome your input. I looked for
a more appropriate forum but could not find one active enough.
My firewall logs are showing ICMP traffic coming from the internal interface
of my boundary router, destined for seemingly random addresses within my
internal network. This has been occuring for some time but was only noticed
when the connection to our ISP was down.
The internal interface of my boundary router?? There is no evidence of a
compromise of the boundary router, as the configuration has not changed, and
the ICMP traffic continued while our ISP connection was down. Additionally,
I was the only one logged in to our boundary router while the traffic
persisted.
The router is a Cisco 2514 running IOS 11.2. I know this is more of a Cisco
issue, but it could also become a security issue.
Any ideas or suggestions are welcome. Thanks as always,
Andy
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
