Endpoint Protection

 View Only

  • 1.  Network Threat Protection Notifications - Where?

    Posted Apr 21, 2009 02:43 PM
    I have been getting the following notifications whenever I run a Wireshark scan.  It is actually coming from the MAC of a Cisco switch port that my system is plugged into.  I am trying to find out how to supress these messages or where to turn them off at?  I have been through the firewall, Intrusion Prevention policies as well as the 'Client User Interface Control Settings' and I am still unable to find out where this message is being generated from?

    imagebrowser image


  • 2.  RE: Network Threat Protection Notifications - Where?

    Posted Apr 21, 2009 02:54 PM
    Cisco router setup as a NAT device, connecting to a PPPoE DSL connection? 


  • 3.  RE: Network Threat Protection Notifications - Where?

    Posted Apr 21, 2009 03:03 PM
    No this is coming from one of our access layer 3750 switches.  Yet its only when I run a wireshark scan, otherwise I never even know Network Threat Protection is running.  Looking at some other messages its sent back it looks like VTP information as I am seeing my VTP Domain in the ethernet frame.  The messages don't immediately pop up as soon as I start the scan so it seems to me the switch is sending out its VTP information and of course wireshark is picking this up, but somehow Network Threat Protection is flipping out as soon as it captures this packet.  I dont necessarily want to turn the scanning off, I just need to be able to turn off this message whenever I run wireshark scans.


  • 4.  RE: Network Threat Protection Notifications - Where?

    Posted Apr 22, 2009 08:55 AM
    no idea. solution from any one is appriciated.


  • 5.  RE: Network Threat Protection Notifications - Where?

    Broadcom Employee
    Posted Apr 22, 2009 09:00 AM
    hi,
    click on firewall policy applied to this client machine, in the notification tab, uncheck the test field. Update the client policy and see if the message is supressed!!!

    Pete!


  • 6.  RE: Network Threat Protection Notifications - Where?

    Posted Apr 22, 2009 09:08 AM
    Pete_4u2002

    i appriciate ur solution. But i think this is not logical.


  • 7.  RE: Network Threat Protection Notifications - Where?

    Posted Apr 22, 2009 10:35 AM
    Did you mean uncheck the 'Display notification on the computer when the client blocks an application'  checkbox?  I do not have any "Test" checkboxes under Firewall policies.  Also I have unchecked this and I am still receiving the messages.