Traffic from Any-From-Firebox to MSSQL
In the dimension's logs I found a larger number of this entries:
duration=30; sent_bytes=28; rcvd_bytes=0
The dst_ip changes to many servers in this VLAN. Do I have security problem here?
The src_ip is the gateway address of the VLAN.
On a DB-server I found entries for unauthorized connections over night.
Thanks in advance for your answers.