ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

UDP flood! From 96.20.204.243:51037 to x.x.x.x:41194, proto UDP

‎04-20-2020 08:42 AM

Hi, 

I got many of these alerts in the Event log.  is it I got attached?  if I do then How to prevent it.?

It a Juniper ISG1000 screen OS version 6.2.0r8.0.

 

Thanks.

Tri Nguyen

2 REPLIES 2
Highlighted
ScreenOS Firewalls (NOT SRX)
Solution
Accepted by topic author tri.nguyen@toshiba.ca
‎04-27-2020 05:50 AM

Re: UDP flood! From 96.20.204.243:51037 to x.x.x.x:41194, proto UDP

‎04-22-2020 03:00 AM

This is an informational alert letting you know that the screen protection kicked in to block this udp flood attempt.  If the ip address is not yours or expected by your customers this is an attack that was successfully stopped so you don't need to do anything.

 

But if it is your or your customers ip and valid traffic, then you will need to go to the screen section and change the threshold levels to stop the flood protection from kicking in on this transaction.

 

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Highlighted
ScreenOS Firewalls (NOT SRX)

Re: UDP flood! From 96.20.204.243:51037 to x.x.x.x:41194, proto UDP

‎04-27-2020 05:51 AM

Thank you so much.  Problem solved.  I increase the threshold.