Event ID - 1723

Port No1723
Service Namepptp
RFC Doc0
ProtocolUDP
DescriptionPPTP provides VPN services for Windows clients primarily but is also supported by UNIX clients such as Linux using PoPToP.
Reference LinkPort No:1723 Service Name:pptp Protocol:UDP
AttackIncoming PPTP to non PPTP servers is most likely an attack, all outgoing PPTP traffic should only be from known clients.
Action:Firewall inbound and outbound PPTP, restrict it to known PPTP servers and clients only. As this traffic is encrypted it will easily bypass most IDS systems/etc.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.