Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Hot answers tagged

8

They can't, and probably never will, offer this function sorry. This may seem rude, it's not meant to be, but ASA's are professional kit, UPNP is a home oriented protocol - you'll rarely find pro kit doing things that people want in their homes and vice versa.


5

Yeah...ummmmm...that's not going to happen. I can't think of any respectable network engineer who would consider UPNP a feature and not a glaring security hole in their firewall. Remember that the ASA is not a home internet sharing gateway. It is a professional firewall designed to protect your network. Letting any unauthenticated client open up ports in the ...


3

Just in case someone else see the same packets. Yes, these are UPnP discovery packets searching for an IP router. If UPnP is enabled in your router, the software that wants to find it can add port mappings, delete port mappings, get the external ip address (the router Ip), etc. Basically, most of the times, the code searching for a WANIPConnection or ...


3

I know this is an old post but just to share my research on the same. I had captured the same set of packets on my wireshark as well. I had initially disabled UPnP on my Windows 7 Machine but this didn't help. After which I got rid of these noisy packets by disabling UPnP at my Router.


2

Sorry to bump this post but I see it went unanswered, this issue still exists on Windows 7 If you turn off both the SSDP discovery service and Universal Plug and Play Device Host, all SSDP traffic is not stopped; User Datagram Protocol (UDP) port 1900 traffic may be logged in firewall logs or packet filtering device logs. If you run a trace of the traffic, ...


2

What to look for is that that the protocol is SSDP - the Simple Service Discovery Protocol (SSDP) is a network protocol based on the Internet Protocol Suite for advertisement and discovery of network services and presence information. -Wikipedia What everyone should know is the IP address of every piece of equipment on their personal network ... so you ...


2

There is no official documentation on this, but port forwarding is allowed via UPnP. Today I have set up a parity node on a new Azure VM (using the ResourceManager) and it did allow the incoming connections on port 30303 despite not having the port allowed in the Network Security Group for that VM. parity is using UPnP by default to allow incoming ...


2

Use manual port forwarding to accomplish what you need. Enabling UPnP support destroys most of purposes of firewall/NAT, as infected machine now has simple and universal interface to redefine firewall at will (in effect disabling any security) and your logs are okay, it says that service running on local machine in LAN on port 51413 has been accessed from ...


1

You're not supposed to use UPnP when you know what ports to forward. UPnP is used for dynamic (home) stuff to enable better connectivity for certain protocols (video, torrent and so on). Just disable UPnP and use the first port forwarding rules. Just make sure that the firewall accept the packets (NAT rules are not firewall rules).


1

Take a look at hole punching technique.


1

If you PS3 and your media server are on the same subnet, your ASA will not need to be involved at all. UPnP discovery is multicast, which doesn't need the participation or cooperation of your firewall as long as it's on the same segment. If it is on different segments (that is, different interfaces off the firewall), you can probably still make it happen ...


1

I just stopped and disabled the UPnP service on a windows 7 PC and I still get these so it's not coming from UPnP on my PC. I know this post is old but wanted to add that it's not necessarily UPnP.


Only top voted, non community-wiki answers of a minimum length are eligible