MS.Netlogon
Description
This indicates an attempt to use the Netlogon service protocol.Netlogon is a service that verifies logon requests, registers, and also authenticates and locates domain controllers.
Affected Products
Netlogon
Impact
Firewall Policy Bypass
Technology
Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device
Behavior
- Reasonable
Default Ports
- TCP/135
- TCP/139
- TCP/445
- TCP/1024-5000
- TCP/49152-65535
- UDP/137-138
- UDP/445