4 Replies Latest reply on Oct 5, 2010 3:06 AM by obelicks

    ACK Port Scan to Riverbed?

      We notice a "ACK Port Scan" to Riverbed device, Is anyone seen this before?

       

      We're confirm this not "ACK" scan but somehow caused by riverbed.

       

      Description :

      An ACK scan is typically used to detect firewall rules. A client sends a TCP header with an ACK flag. If the target server port is open, the server responds with a RST. If the port is closed, no response is sent because the firewall has dropped the packet. An alarm is sent if a threshold of ACKs not associated with any flow between a source and destination IP is being exceeded.