Managed Sentinel – Alert 227

Alert IDMS-A227
Alert NameInternal hosts generating firewall denials
DescriptionThis alert identifies the top 25 internal hosts generating firewall denials. The denials may indicate an issue with the internal hosts or missing firewall rules.
Severity LevelLow
Threat Indicator
MITRE ATT&CK TacticsDiscovery
Log sourcesIP Tables
False Positives
Recommendations