IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Containers Advanced: How Would an External Port Scan Show Up as a Kubernetes Policy Alert?

Containers Advanced: How Would an External Port Scan Show Up as a Kubernetes Policy Alert?

Environment

  • Carbon Black Cloud Containers Advanced: All Supported Versions

Question

  • Running a NMAP scan against a kubernetes cluster is generating no scan alerts
  • Running the scan from a computer outside the cluster
  • Why is no alert being generated?

Answer

  • It's unlikely an alert would show up from an external device because it's likely hitting a load balancer
  • If an alert would shows up it should show up as an ingress connection

Labels (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-21-2022
Views:
208
Contributors