in this video, I show you how you can set up a feature in your Sophos UTM called antiport scanning this module is built into the Sophos UTM and can stop port scanning against your network
This can make it a pain for attackers to do recon on your network the idea is that the UTM will drop traffic that is sequentially scanning from port to port.
This feature is easy to setup and the logging that Sophos provides is really useful for this.
1 thought on “Sophos Anti-port scanning setup”
What reasons would you not activate the Anti-Portscan feature on your UTM?