Endpoint Protection Small Business Edition

Hi,

Please look at the attchment. Last 2 days I am getting this report.

Can anyone please give me a small explanation? That will be very helpful for me to take necessary steps.

Thankx in advance.

Attachment(s)

Weekly sheduled report_Wed Mar 02 12_25_39 BDT 2011.pdf   56 KB 1 version

you need to check the two attacking host, are they printers , routers?

https://www-secure.symantec.com/connect/forums/what-difference-between-top-sources-attack-and-risk-distribution-attacker#comment-2653991

You may also be able to get more information about what is occuring by opening Monitors>Logs within the SEPM. Select Log type: Network Threat Protection & Log content: Attacks. Also ensure that you have a time range selected that would include the time frame that these attacks were logged in the report you have received.

Do you recognise these  ip addresess?

10.1.20.131
110.1.155.229

If you  think that these are the  computers, in your network, then, scan these  computer, with latest  SEP Definitions. You can also run sep support  tool-loadpoint  on these.

If these  IP addressess are  not of your  network, then you  czan simply  block these  IP adddresses..

Hi,

Sorry for very late answer.

I can't recognize those IP, but in "HR1" in "Top Targets attacked by clients" section, is my networks Laptop.

So, from where I'll block those IP, from that laptop?

~r