Video Screencast Help
Search Video Help Close Back
to help

EPP is logging ICMP type=3 code=3, by the hundreds

Created: 20 Nov 2012 | 2 comments
PaulWolpert's picture
PaulWolpert
0 0 Votes
Login to vote

I am seeing log entries for every dns access, can be 60 to 80 occurances.  I have smart dns enabled.  Any idea why?  It is sure resulting in very slow web access.

 

Paul

Discussion Filed Under:
, , , ,

Comments 2 Comments • Jump to latest comment

Brian81's picture
Brian81 Trusted Advisor
EPP is logging ICMP type=3 code=3, by the hundreds - Comment:20 Nov 2012 : Link

What version are you running?

Are you filtering ICMP traffic?

 

SEP Knowledge Base

Endpoint SWAT

0
Login to vote
  • Actions
Mithun Sanghavi's picture
Mithun Sanghavi Symantec Employee Technical Support Accredited
EPP is logging ICMP type=3 code=3, by the hundreds - Comment:21 Nov 2012 : Link

Hello,

Check this Article 

Large delays for ICMP traffic when Reverse DNS is used with the DNS server listed as an IPS exclusion

http://www.symantec.com/docs/TECH186158

and Check this Thread: 

Port Scan Attack. Blocking 3-5 Every Minute.

https://www-secure.symantec.com/connect/forums/port-scan-attack-blocking-3-5-every-minute

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote
  • Actions