Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  UDP flood! From 96.20.204.243:51037 to x.x.x.x:41194, proto UDP

    Posted 04-20-2020 08:43

    Hi, 

    I got many of these alerts in the Event log.  is it I got attached?  if I do then How to prevent it.?

    It a Juniper ISG1000 screen OS version 6.2.0r8.0.

     

    Thanks.

    Tri Nguyen



  • 2.  RE: UDP flood! From 96.20.204.243:51037 to x.x.x.x:41194, proto UDP
    Best Answer

    Posted 04-22-2020 03:01

    This is an informational alert letting you know that the screen protection kicked in to block this udp flood attempt.  If the ip address is not yours or expected by your customers this is an attack that was successfully stopped so you don't need to do anything.

     

    But if it is your or your customers ip and valid traffic, then you will need to go to the screen section and change the threshold levels to stop the flood protection from kicking in on this transaction.

     



  • 3.  RE: UDP flood! From 96.20.204.243:51037 to x.x.x.x:41194, proto UDP

    Posted 04-27-2020 05:52

    Thank you so much.  Problem solved.  I increase the threshold.