Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

virus access-list help

Hello all,

I have an access-list that is denying any access to eq 445. Someone had set this list up before I was here, and I assume it's for some Blaster varient or something.

The problem is one of the System guys says it's a legit service, something to do with Active Directory.

When I do "sh logging" I see thousands of hits where it deny's one packet at a time from port 445 to misc IP addresses.

I do "sh access-list" and the deny 445 entry has millions of hits.

We do a network wide Symantec update and scan and find nothing.

Should I disable this 445 entry? Is it a legit service?

Thanx for any help

1 REPLY
New Member

Re: virus access-list help

Ack!

I have no idea why there are 3 conversations of this one! I hit submit and kept getting prompted with some download option for NetProf, so I'd hit cancel and Submit again until finally it was posted.

No idea why it was posted 3 times!

111
Views
0
Helpful
1
Replies
CreatePlease to create content