FSCS12 firewall warnings.
One of our customers has a computer running F-Secure Client Security 12.00 that is not connected to the corporate LAN. It only has Wi-Fi access to a router, for connection to the public net. The computer regularly logs incidents like these:
Date: 2015-10-15 09:10:57+02:00
User account: computername\username
Product: F-Secure Anti-Virus Internet Shield (OID: 18.104.22.168.4.1.2213.25)
Severity: warning (2)
(4) Intrusion attempt detected
Is this something worth investigating / fixing?
I think 139 (TCP) is "Microsoft NetBIOS session services" or the "Windows File sharing and network printers access" service in F-Secure Internet Shield parlance.
Thanks in advance, Yours Sincerely:
Tamas Feher, 2F 2000 Kft., Hungary.