Connection Attack

[switzer]

We seem to be under attack again from numerous
connections.
They climb when we look under -
fw ctl pstat
Can you tell me where in the logs we can see if
certain ip addresses are opening these connections
so we can block them ?

Steve

[mcnallym]

Providing that you are logging the traffic then in Smartview Tracker. You can id the src ip and then either right click and block or add a rule that drops traffic from that src.