Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

logs

what it means it shows all the time ,what can i do to prevent this.

Security Services Alert Probable TCP FIN scan detected

Category: Entry Level Firewalls
Reply

Answers

  • fmadiafmadia Moderator

    Hi Samaj,

    the above log indicates that there might be a possible computer which may be scanning for FIN Packets (a type of TCP Flag).

    A FIN scan is a type of Port Scan to detect whether specific ports are open/closed on a target machine and it can be used to attack the target.

    I would recommend you to check on the source of the FIN Scan (you can see this in the firewall logs) and investigate further.

    Note: sometimes this can be a false positive but it's always better to investigate and double check.

Sign In or Register to comment.