Endpoint Protection Small Business Edition

 View Only

  • 1.  Attack: an intrusion attempt was blocked

    Posted Sep 09, 2015 04:31 PM
      |   view attached

    Hello.

    I have a server that is a host to virtual machines. The server has Symantec End Point Protection SBE on it and every day it pops up a message stating  "Attack: an intrusion attempt was blocked".

    The odd thing is, the attacker compuer IP Address is the same as the Destination Computer. It's like it is reportinig that it is attacking itself.

    Can anyone help me on this?

     

    Thank you!

     



  • 2.  RE: Attack: an intrusion attempt was blocked

    Posted Sep 09, 2015 04:40 PM

    This seems to be a very vague alert, there was another thread here about it:

    https://www-secure.symantec.com/connect/forums/ids-alerts-contain-insufficient-information-can-they-be-disabled

    May want to check in with support.



  • 3.  RE: Attack: an intrusion attempt was blocked

    Posted Sep 10, 2015 01:21 AM

    can you run the symhelp  and perfrom a theat analysis scan  ?