Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Containers Advanced: How Would an External Port Scan Show Up as a Kubernetes Policy Alert?

Containers Advanced: How Would an External Port Scan Show Up as a Kubernetes Policy Alert?

Environment

  • Carbon Black Cloud Containers Advanced: All Supported Versions

Question

  • Running a NMAP scan against a kubernetes cluster is generating no scan alerts
  • Running the scan from a computer outside the cluster
  • Why is no alert being generated?

Answer

  • It's unlikely an alert would show up from an external device because it's likely hitting a load balancer
  • If an alert would shows up it should show up as an ingress connection

Labels (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-21-2022
Views:
75
Contributors