Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Inbound UDP 137 traffic keeps appearing

I have a ASA 5510 configured with vpn capability. Somehow the vpn client will keep broadcasting the traffic via UDP port 137. Why is this so?

Thanks

6 REPLIES
Hall of Fame Super Silver

Re: Inbound UDP 137 traffic keeps appearing

Leonard

Broadcasting on UDP port 137 is a typical Windows networking behavior. Are these VPN clients Windows PCs?

HTH

Rick

New Member

Re: Inbound UDP 137 traffic keeps appearing

Yes they are VPN clients Windows PCs. Why?

Hall of Fame Super Silver

Re: Inbound UDP 137 traffic keeps appearing

Leonard

Because if they are Windows PCs then broadcasting on UDP 137 is a normal behavior. Your question suggested that there was something unexpected or unusual. But Windows PCs broadcasting on UDP 137 is quite normal.

HTH

Rick

New Member

Re: Inbound UDP 137 traffic keeps appearing

However the ASA 5510 keeps sending me alerts on the VPN clients keep broadcasting the traffic indicating them to be critical alerts. Why is this so?

Hall of Fame Super Silver

Re: Inbound UDP 137 traffic keeps appearing

Leonard

Without knowing how your ASA is set up I could not tell you why it is alerting on this traffic.

HTH

Rick

New Member

Re: Inbound UDP 137 traffic keeps appearing

Thanks. I don't remember setting my firewall on this setting. But from your expertise what can the problem be isolated at?

But then my VPN permit client out to the internet after they are authenicated. Cannot be they must keep broadcasting the network with netbios.

842
Views
0
Helpful
6
Replies