Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are being hammered by port scans from a specific IP address. How can I block this IP from my SonicWALL NSA240?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

I have a SonicWall appliance myself. Everyone is "hammered" as you say by port scans. Most people don't know they are unless an outside port scanner actually breaks through. Your sonicwall is doing its job of blocking the IP address when it "drops" the port scan. You will see this in your log files as: "Possible port scan dropped-" and is by design. You cannot stop port scans but they ARE blocked by SonicWall appliances.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.