Mar 12 2020
04:21 AM
- last edited on
Nov 30 2021
10:03 AM
by
TechCommunityAP
Mar 12 2020
04:21 AM
- last edited on
Nov 30 2021
10:03 AM
by
TechCommunityAP
Is it possible to disable lateral movement path detection ? I just discovered a lot of outging TCP-Connections to TCP-Port 135 in state TIME_WAIT. Event-ID 4227 is logged in System Event log from time to time. I assume this is realted to SAM-R request in context of lateral movement path detection.
Mar 12 2020 04:26 AM
Solution@cscherb Yes, contact support to verify this is indeed the cause, and if decision is to disable it, the support engineer can provide you with a script that will disable this feature, but in general you shouldn't see any problem with it.
Mar 12 2020 04:39 AM
Mar 12 2020 06:37 AM
Mar 12 2020 04:26 AM
Solution@cscherb Yes, contact support to verify this is indeed the cause, and if decision is to disable it, the support engineer can provide you with a script that will disable this feature, but in general you shouldn't see any problem with it.