<div>
See what Firewall settings you can set in the Sonic Wall to stop most attacks right at the firewall. We do this on Juniper and smaller Cisco boxes and Symantec is not showing any attacks in its Intrusion System.
</div>


See what Firewall settings you can set in the Sonic Wall to stop most attacks right at the firewall. We do this on Juniper and smaller Cisco boxes and Symantec is not showing any attacks in its Intrusion System.

IT manager

Dave Stone

<div>
<div class="content wysiwyg-content">
Hello,<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;We have installed a new Exchange server on our single domain network. Since configuring another public IP to accomodate it we are getting many &quot;High-Risk Intrusion Detected&quot; alerts from the Symantec Endpoint we have running on this server. It is mostly:<br />
<br />
Attack Signature<br />
Web Attack: Remote OS Command Injection<br />
<br />
with some:<br />
Attack Signature<br />
Attack: D-Link DSL 2750B Arbitrary Command Execution<br />
<br />
<br />
The attacking IP's change so I can't blacklist them on the firewall. We are using Sonicwall NSA 2650 as a firewall. Is there anyway to stop these attacks? I realize that the Endpoint protection is doing what it should but I am concerned that eventually the bad guys will get through.
</div>
</div>


Hello,
	We have installed a new Exchange server on our single domain network. Since configuring another public IP to accomodate it we are getting many "High-Risk Intrusion Detected" alerts from the Symantec Endpoint we have running on this server. It is mostly:

Attack Signature
Web Attack: Remote OS Command Injection

with some:
Attack Signature
Attack: D-Link DSL 2750B Arbitrary Command Execution


The attacking IP's change so I can't blacklist them on the firewall. We are using Sonicwall NSA 2650 as a firewall. Is there anyway to stop these attacks? I realize that the Endpoint protection is doing what it should but I am concerned that eventually the bad guys will get through.

High-Risk Intrusions on new Exchange Install (Symantec - Sonicwall)

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.