Port 22 Non-SSH Traffic Detection

info Nessus Network Monitor Plugin ID 8077

Synopsis

The remote client appears to be tunneling data over port 22 TCP (SSH)

Description

The remote host is running non-SSH traffic over port 22. Port 22 is a port that is typically allowed outbound access via a firewall. Because of this, some users may attempt to pass non-SSH traffic over port 22.

Solution

Ensure that this application is authorized for your network

Plugin Details

Severity: Info

ID: 8077

Family: Policy

Published: 1/3/2014

Updated: 6/1/2015