ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

Event Alarms email gave me a report of network attack that was happen 2 weeks ago

‎03-25-2020 02:52 AM

Today (2020-03-25) at 17:17. I received an email of "NetScreen Event Alarms Reported" from my firewall.

It shows a list of "systm-emergency-00006: Treadrop attack!" from an IP address. Which the date were all "2020-03-11".

Is this a normal behavior that the firewall send me the event alarms that was happen 2 weeks ago?

1 REPLY 1
Highlighted
ScreenOS Firewalls (NOT SRX)

Re: Event Alarms email gave me a report of network attack that was happen 2 weeks ago

‎03-25-2020 03:18 AM

the emails are generated in real time.  So check that the date/time is correctly set on the device.  Or the email headers that it has been delayed in delivery somewhere along the line.

 

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Feedback