| Event Id | 15111 |
| Source | FTP Access Filter |
| Description | ISA Server denied the assignment of the IP address %1 to the network adapter "%2" since the IP address offered is not included in the "%3" network IP addresses. This could indicate a possible DHCP attack. The Record Data contains the suspicious DHCP packet. |
| Event Information | According to Microsoft Cause: This event occurs when the DHCP anti-poisoning intrusion detection mechanism detects a malicious or invalid offer. Resolution: Follow the instructions provided in the description for the related alert. To do this, in the console tree of ISA Server Management , click Monitoring, then click the Alerts tab. In the list of alerts, select the relevant alert. The alert description displays in the alert details pane. |
| Reference Links | Event Id:15111 Source Id:FTP Access Filter |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.