Defender Scans trigger IDS Appliance for port 445 sniffing

G

Guest

Anyone seen this?
When defender hits the "my network places" folder, it starts firing up TCP
connections and tickling whatever the links inside point to.

This is triggering an IDS box run by the networking guys and shutting down
the users port on the switch.

I am wondering if this behavior is by design or is it a nasty by-product of
something else. I personally do not understand why Defender would need to do
this.
 
G

Guest

Hi Stephen.

No answer for you but I just created a post ("Windows Defender and IIS")
which I think is trying to say the same thing. In my case I believe it is
starting IIS on my computer and using that to tickle available network places
during a scan.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top