RT_SCREEN_ICMP: Address sweep! source: 10.x.x.x, destination: 10.x.x.x zone name: Untrust, interface name: fe-0/0/4.0, action: alarm-without-drop
the source is our solarwinds box IPAM scanning the subents..
I have treid inscrese the time on the IPAM settings to slow it down I have also tried incresing the threshodl on the screen
is ther a way to white list this device for ICMP (you can with TCP)
please help !! thanks
I don't see any whitelist options for ICMP either.
The only option is to put a firewall filter matching the ICMP and send as packet mode.