Hello everybody. PRTG try to access the network devices which should be monitored via port 445, 135 and 139 (file share). The ports are blocked by our firewall and looks like an attack. Why does PRTG use this ports and how can I stop it?
Thanks for your answers in advance Br Christoph
Article Comments
Hello, Thank you for your answer. I am only using SNMP sensors. For example the standard template for CISCO devices.
Dec, 2021 - Permalink
Hello Christoph,
In this case please
1) head to "Setup > System Administration > Monitoring" and disable the "Recommended"- and "Similar"- Sensors Detection Feature for testing purposes
2) also head to the "settings"-tab of your device and disable "System information" and "similar sensors detection" in the "Advanced Network Analysis" section here as well
as these features might use those ports as well. If the issue persist, feel free to send us screenshots of the issue, device & settings to support@paessler.com so we can take a closer look.
Dec, 2021 - Permalink
Hello,
Which sensors are you using? This does seems like you are using any SMB sensors on this device. TCP port 135 is also used by WMI.
You can stop it by deleting or pausing sensors underneath the affected device.
Dec, 2021 - Permalink