Event NWC30706 - Realm mapping error for remote x.x.x.x port ext - Web Scan Port 4500

[NetworkBod]

Has anyone came across info message NWC30706 in the user logs before? Its not causing any problem but im interested in finding out why its happening from a security point of view. It seems to occur periodically on both our IVE's which have different ISP's. IP within the log usually trace back to a Internet Web scanner, our security team confirm the IP's are opportunistically scanning the internet and is not a risk to organization, from our FW logs it does look like they are scanning port 4500 on the external interface of IVE. The message in the log displays a random user session 'i believe' so be good to know why a web scan of the ext port is generating the log message as below associated to a  current user session .

Example of log message as below.

Info NWC30706 2022-02-22 12:58:31 - ive - [users private IP here x.x.x.x] [email protected](REALM)[ROLE] - Realm mapping error for remote (unknown external IP here - x.x.x.x) port ext

Thanks.

[zanyterp]

that should be due to an unexpected processing error on the log. if you have not done so, please open a case with our support team for further investigation

[NetworkBod · Accepted solution]

@zanyterp Hi, yes i did raise a case and was passed to your Dev team to resolve in a future release. Thanks.

[zanyterp]

thank you for the update; i am glad to hear you have received feedback on the case