cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2329
Views
0
Helpful
6
Replies

Inbound UDP 137 traffic keeps appearing

leo_zidane
Level 1
Level 1

I have a ASA 5510 configured with vpn capability. Somehow the vpn client will keep broadcasting the traffic via UDP port 137. Why is this so?

Thanks

6 Replies 6

Richard Burts
Hall of Fame
Hall of Fame

Leonard

Broadcasting on UDP port 137 is a typical Windows networking behavior. Are these VPN clients Windows PCs?

HTH

Rick

HTH

Rick

Yes they are VPN clients Windows PCs. Why?

Leonard

Because if they are Windows PCs then broadcasting on UDP 137 is a normal behavior. Your question suggested that there was something unexpected or unusual. But Windows PCs broadcasting on UDP 137 is quite normal.

HTH

Rick

HTH

Rick

However the ASA 5510 keeps sending me alerts on the VPN clients keep broadcasting the traffic indicating them to be critical alerts. Why is this so?

Leonard

Without knowing how your ASA is set up I could not tell you why it is alerting on this traffic.

HTH

Rick

HTH

Rick

Thanks. I don't remember setting my firewall on this setting. But from your expertise what can the problem be isolated at?

But then my VPN permit client out to the internet after they are authenicated. Cannot be they must keep broadcasting the network with netbios.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: