Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
madunix
New Contributor

udp/35072

I have alot of UDP traffic ... looking to block it.

2 REPLIES 2
ede_pfau
SuperUser
SuperUser

hi,

this looks like NetBIOS traffic on port 137. Please look it up to see if it's security relevant for your network. The FGT will detect it on any interface, even internal ones. It reflects the fact that you have Windows PCs on your LAN.

In former versions of FortiOS this kind of traffic was logged which could be prevented by changing a setting. In your case you could remove the IPS signature if you determine it's irrelevant.


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
madunix

it shows severity info

Labels
Top Kudoed Authors