Results 1 to 3 of 3

Thread: Intrusion alert on FXO Gateway

  1. #1
    Junior Member
    Join Date
    Apr 2010
    Location
    Aurora, Nebraska
    Posts
    8

    Default Intrusion alert on FXO Gateway

    Hi.

    A few days ago we started working with a company that is going to monitor our LAN.
    I think the agent is causing our FXO Gateway to detect an intrusion alert that is coming
    from our primary server within our LAN. I thought that changing the Nameserver in DNS
    Settings to the primary server would stop the alerts. It didn't.

    So, I have turned off the email alert for IDS so that emails don't keep coming to me.
    But I would like to resolve this so that I can turn the alert on again.

    Thanks.

  2. #2
    Quadro Architect
    Join Date
    Jun 2006
    Location
    Around myself
    Posts
    2,075

    Default

    what functions your "primary server" has? Is it SIP server, or just DNS/DHCP/router?

    Did you look into the IDS Log page? Which kind of attacks are detected? Is it port scan or something else?

    It is very possible that some software installed on the server is scanning all machines in the network (thats basically what monitoring tools do), and so Quadro detects this scan attempt as intrusion attempts (port scan is a "classic" intrusion type). If this is the case, there is nothing else you can do except switching OFF the IDS on the Quadro.

  3. #3
    Junior Member
    Join Date
    Apr 2010
    Location
    Aurora, Nebraska
    Posts
    8

    Default

    davrays, thank you for your response. It caused me to go back and re-read the documentation. Something I read made me look at the settings in Internet Uplink ->
    Firewall/NAT. I enabled the Firewall and set it to Low Security because my FXO is behind our firewall. I changed the event setting back and I am not getting any emails.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. SMS alert messages
    By Zarf! in forum Suggestions and Feedback
    Replies: 2
    Last Post: 01-22-2008, 01:49 AM
  2. Monitored Extension Alert
    By cella in forum Suggestions and Feedback
    Replies: 2
    Last Post: 12-02-2007, 05:25 AM
  3. Security alert Aastra admin password
    By Synertic in forum Hardware Interoperability
    Replies: 4
    Last Post: 10-28-2007, 05:55 PM
  4. QCC alert by mail
    By ayenacom in forum VoIP Service Opinions
    Replies: 3
    Last Post: 02-13-2007, 08:33 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •