Wireless Water Cooler

Reply
Occasional Contributor II

airwave doing port scan?

Anyone ever seen airwave do random port scans to devices on the network? We have our airwave system reaching out (tcp 135) to random systems and those networks are not in the discover page.

Guru Elite

Re: airwave doing port scan?

Are you using LDAP authentication or an Exchange server for sending emails?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II

Re: airwave doing port scan?

Exchange is sending emails, but the auth is TACACS/RADIUS

Guru Elite

Re: airwave doing port scan?

TCP 135 is used for some Exchange communications. What servers are you seeing the traffic? Is it only exchange and/or domain controllers?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II

Re: airwave doing port scan?

It really goes to all systems not just windows or exchange but *nix as well.

Re: airwave doing port scan?

if it happens often enough i would start a packet capture on the airwave or target server to see what exactly is going on.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: