topic Management Interface Traffic to Port 135 in General Topics https://live.paloaltonetworks.com/t5/general-topics/management-interface-traffic-to-port-135/m-p/35044#M25734 <HTML><HEAD></HEAD><BODY><P>Hi All,</P><P></P><P>I have a query regarding a management interface which is showing a lot of traffic (several times a minute) from the management interface to various IP's on port 135. </P><P></P><P>Has anyone seen this before? Why would the management interface be sending out so many requests?</P><P></P><P>Thanks,</P><P>Andrew</P></BODY></HTML> Wed, 21 Aug 2013 04:15:32 GMT agosney 2013-08-21T04:15:32Z Management Interface Traffic to Port 135 https://live.paloaltonetworks.com/t5/general-topics/management-interface-traffic-to-port-135/m-p/35044#M25734 <HTML><HEAD></HEAD><BODY><P>Hi All,</P><P></P><P>I have a query regarding a management interface which is showing a lot of traffic (several times a minute) from the management interface to various IP's on port 135. </P><P></P><P>Has anyone seen this before? Why would the management interface be sending out so many requests?</P><P></P><P>Thanks,</P><P>Andrew</P></BODY></HTML> Wed, 21 Aug 2013 04:15:32 GMT https://live.paloaltonetworks.com/t5/general-topics/management-interface-traffic-to-port-135/m-p/35044#M25734 agosney 2013-08-21T04:15:32Z Re: Management Interface Traffic to Port 135 https://live.paloaltonetworks.com/t5/general-topics/management-interface-traffic-to-port-135/m-p/35045#M25735 <HTML><HEAD></HEAD><BODY><P>.Do you have agentless user-id and client probing enabled if so then its expected behavior since the management interface will send out probes for both unknown ip as well as to retain the existing mappings.</P></BODY></HTML> Wed, 21 Aug 2013 05:11:06 GMT https://live.paloaltonetworks.com/t5/general-topics/management-interface-traffic-to-port-135/m-p/35045#M25735 sraghunandan 2013-08-21T05:11:06Z Re: Management Interface Traffic to Port 135 https://live.paloaltonetworks.com/t5/general-topics/management-interface-traffic-to-port-135/m-p/35046#M25736 <HTML><HEAD></HEAD><BODY><P>You Can verify by navigating to device-user-idenitification-user mapping and click open to see the following</P><P><IMG __jive_id="7795" alt="clientprobing.PNG.png" class="jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/7795_clientprobing.PNG.png" /></P><P></P><P>Also here's a doc which talks about the wmi probing feature</P><P><A _jive_internal="true" href="https://live.paloaltonetworks.com/docs/DOC-4971">https://live.paloaltonetworks.com/docs/DOC-4971</A></P></BODY></HTML> Wed, 21 Aug 2013 05:13:48 GMT https://live.paloaltonetworks.com/t5/general-topics/management-interface-traffic-to-port-135/m-p/35046#M25736 sraghunandan 2013-08-21T05:13:48Z