Firewall question

Can anyone tell me exactly what this message means?

Time
17:44.8

Priority
Alert

Category
Intrusion Prevention

Message
IPS Detection Alert: ICMP Destination Unreachable (Port Unreachable), SID: 310, Priority: Low

Source
10.0.7.147, 63210, X0, S-W8

Destination
10.0.200.201, 53, X5, M-201

The source is a workstation on my LAN. Is it trying to do something bad or is someone using it to do something bad?

Thanks for your help.
mfonyAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
Nope, this message refers to if PING is not possible or ICMP is disabled.  Usually ICMP is enabled to ensure ping tests can be performed as well as monitoring systems can detect end-point availability.  Are you using any monitoring solution which might be trying to contact the destination device?  Security software such as NMAP, Nessus, etc. also uses PING.
0
mfonyAuthor Commented:
I can ping the device without a problem. I don't use any monitoring solution. The server is connected to the network as a DFS device and workstations normally don't have any connection to it at all.
0
Greg HejlPrincipal ConsultantCommented:
Destination
10.0.200.201, 53, X5, M-201

Your workstation is scanning it's environment for available services, in this case it is looking for DNS on the destination server.

The detection in your firewall is an fyi as icmp discovery is used by many devices.  if you were to see this from a source you did not recognize that would be a flag worth investigating.

http://searchnetworking.techtarget.com/tip/ICMP-The-good-the-bad-and-the-ugly
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.