firewall questionable errors

[oig01]

I keep getting about 15-20 firewall errors per day. Most are reason=port range, gives source IP/port and Dest IP and port.

One of the errors is a checksum failure

I have the extended network driver disabled.

[adrien]

Hi

It shouldn't be possible to get any firewall hits reported if the driver isn't loading.

When you say you have the driver disabled, did you reboot?

Regards

Adrien

[oig01]

Ok I dont recall if I rebooted the computer system running wingate but I did so just now.

Once I started up the gatekeeper a couple of things were logged about the firewall.

In system messages ID 0706, object =ENS, user=system
"your ENS driver has been manually disabled. to have further ENS functionality you must re-enable the driver.

I also got a ton of Port range logs with blue up arrows.

I have disabled DHCP, DNS, POP3, SMTP, IMAP4, winsock and GDP service since I have no use for them. I am using the IE proxy setting and wingate database and NOT windows AD.

As I was typing this I got another set of the firewall logs (blue up arrows)

[adrien]

it's only possible to get entries in the firewall window in GateKeeper from the ENS driver, so it must still be loading.

One sure-fire way to stop it loading is to rename the driver file and reboot.

On XP, it's called

windows\System32\Drivers\qbikhkxp.sys

Regards

Adrien

[oig01]

I have renamed the ENS driver file you mentioned and everything looks good so far. I would only need the ENS enabled if our networked was not protected by a firewall which we do have a firewall hardware already in place.