Firewall Intrusion Detections

[CityIT]

I am having the following problems with intrusion attempts blocked by firewall in my Endpoint Protection Suite:

Smart DNS attacks originated from my server MAC and my adsl gateway MAC to several AD workstations, almost every day.
Smart ARP attacks originated by a mobile device MAC connected through Wifi with client isolation to several other workstations (not the same workstations with smarDNS attacks)

Why is the above happening?
What should I check first in order to be sure that my business network have been compromised or not?

Thnx in advance,
Jimmy

[CityIT]

Almost a month since thread started and not a single reply.

Maybe it's a silly question?

[ArtiNegi]

Probable is that my computer gets affected in spite of having up to date antivirus strolling and sure services and ports are blocked by firewall.

[Darth Panda]

Hi Artinegi,

I'm sorry but I do not understand the question. Why do you think your computer is infected? What symptoms are you having?

Regards,

[Darth Panda]

Hi CityIT,


I'm sorry we did not answer you when you posted the message. When the firewall blocks an intrusion attempt, we can not know why it occurs, you should check the computer that does it.

Regards,