Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are being hammered by port scans from a specific IP address. How can I block this IP from my SonicWALL NSA240?

share|improve this question
up vote 0 down vote accepted

I have a SonicWall appliance myself. Everyone is "hammered" as you say by port scans. Most people don't know they are unless an outside port scanner actually breaks through. Your sonicwall is doing its job of blocking the IP address when it "drops" the port scan. You will see this in your log files as: "Possible port scan dropped-" and is by design. You cannot stop port scans but they ARE blocked by SonicWall appliances.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.