SRX Services Gateway
Highlighted
SRX Services Gateway

ICMP screen filling loogs from IPAM scans

‎06-07-2017 10:12 AM

RT_SCREEN_ICMP: Address sweep! source: 10.x.x.x, destination: 10.x.x.x zone name: Untrust, interface name: fe-0/0/4.0, action: alarm-without-drop

 

the source is our solarwinds box IPAM scanning the subents.. 

 

I have treid inscrese the time on the IPAM settings to slow it down I have also tried incresing the threshodl on the screen 

 

is ther a way to white list this device for ICMP (you can with TCP) 

 

please help !! thanks 

2 REPLIES 2
Highlighted
SRX Services Gateway

Re: ICMP screen filling loogs from IPAM scans

‎06-07-2017 02:15 PM

I don't see any whitelist options for ICMP either.

 

https://www.juniper.net/documentation/en_US/junos/information-products/pathway-pages/security/securi...

 

 

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Highlighted
SRX Services Gateway

Re: ICMP screen filling loogs from IPAM scans

‎06-08-2017 03:19 AM

Hi 

 

The only option is to put a firewall filter matching the ICMP and send as packet mode.

Abdellah HAMDAD
Senior Network Consultant
JNCIE-SP/ENT/SEC
JNCIP-DC
JNCSP-SP/ENT/SEC
JNCDS-WAN/DC/SEC
Feedback