topic Re: A lot of unknow-udp traffic (port 123) in General Topics https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41152#M30227 <HTML><HEAD></HEAD><BODY><P>I had some unusual behavior with DHCP using application-default for the service.&nbsp;&nbsp; However it identified DHCP using Service Any.&nbsp;&nbsp; You might try something like that as a test if that sounds familiar.</P></BODY></HTML> Sat, 12 Apr 2014 20:34:20 GMT JohnTymann 2014-04-12T20:34:20Z A lot of unknow-udp traffic (port 123) https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41151#M30226 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>I observed since 04/09 a lot of traffic clasified as unknown-udp from my DMZ to Untrust. It could be missidentified because I have security rule that allow NTP.</P><P>It could be related to 429 package of Thread prevention update. Now I'm on 430-2169.</P><P></P><P>Do You have the same?</P><P></P><P></P><P>Regards</P><P>SLawek</P></BODY></HTML> Sat, 12 Apr 2014 06:54:45 GMT https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41151#M30226 _slv_ 2014-04-12T06:54:45Z Re: A lot of unknow-udp traffic (port 123) https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41152#M30227 <HTML><HEAD></HEAD><BODY><P>I had some unusual behavior with DHCP using application-default for the service.&nbsp;&nbsp; However it identified DHCP using Service Any.&nbsp;&nbsp; You might try something like that as a test if that sounds familiar.</P></BODY></HTML> Sat, 12 Apr 2014 20:34:20 GMT https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41152#M30227 JohnTymann 2014-04-12T20:34:20Z Re: A lot of unknow-udp traffic (port 123) https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41153#M30228 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: black; font-size: 10.5pt; line-height: 1.5em;">NTP content was modified in content 428 to counter certain apps that were using the same udp port 123 to pass traffic. The behavior has been corrected will appear as such the next release. </SPAN></P></BODY></HTML> Sat, 12 Apr 2014 22:24:17 GMT https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41153#M30228 sjamaluddin 2014-04-12T22:24:17Z Re: A lot of unknow-udp traffic (port 123) https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41154#M30229 <HTML><HEAD></HEAD><BODY><P>Thx, so I will waiting for 431 update.</P></BODY></HTML> Sun, 13 Apr 2014 06:58:13 GMT https://live.paloaltonetworks.com/t5/general-topics/a-lot-of-unknow-udp-traffic-port-123/m-p/41154#M30229 _slv_ 2014-04-13T06:58:13Z