New ISA 2006 Server

[BatchFile]

I've just set up a new DHCP / DNS (secondary) / DC (no FSMO roles) / ISA server to replace a couple of ageing ones and it's on test at the moment. I THINK:rolleyes: I've "allowed" all the protocols I need to and everything seems to be working ok - but in the ISA log, every few seconds, the following line is appearing:

 

Destination IP: 255.255.255.255

Destination Port: 5151

Protocol: Unidentified IP Traffic

Action: Denied connection

Client IP: (one of the pc's in reception)

Destination Network: Local Host

 

Ring any bells, anyone? Basically after what it is and whether I need to do anything about it!

Cheers,

TR

Edited July 6, 2010 by BatchFile

[SYNACK]

Its broadcast traffic so not directed to the internet just to all other computers in the network segment. Your ISA server is doing as it should and blocking it.

 

It may be an idea to find out what app is on that machine generating a braodcast though as it is not standard behaviour. Could be a trojan of some kind Port 5151 (tcp/udp) : SpeedGuide.net