It could be a false positive. When you access the "activity" page on Vonage's website it opens more than one tcp connection, four in my test case. The source tcp ports (sent by the pc) for those connections most likely are sequential or close to it, 65001, 65002, 65003, 65004, for example.
In the reply from Vonage's website back to the pc, those ports are now the destination tcp port. Because the https connections open and close so fast, your firewall could interperet the sequential destination tcp ports as a scan.
You show a lot more than four tcp ports, but it's still my guess as to what is happening. You can prove or disprove it by tracking the user's outbound connections to Vonage. See if his source tcp ports are the same the firewall shows in the scan alert.
DallasFlier Vonage Forum Master
Joined: Mar 03, 2005 Posts: 277
Location: Dallas, TX
I recently used another PC to access the Vonage web site logging in as the consultant does. The firewall detected no port scans. At this point it seems to be his laptop that may be part of the problem. He is back here tomorrow at that time I will do some testing.
Thanks for all the advice.
Tal
dabones Vonage Forum Evangelist
Joined: Jan 31, 2005 Posts: 508
Location: London, ON (519) & Columbia, SC (803)
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
All times are GMT - 5 Hours
Vonage Service Plans
Vonage VoIP Members
Members New behm27 New Today 2 Yesterday 3 Total 64296 Who Is On Site Visitors 135 Members 0 Total 135
1Unlimited calling and other services for all residential plans are based on normal residential, personal, non-commercial use. A combination of factors is used to determine abnormal use, including but not limited to: the number of unique numbers called, calls forwarded, minutes used and other factors. Subject to our Reasonable Use Policy and Terms of Service.
2Shipping and activation fees waived with 1-year agreement. An Early Termination Fee (with periodic pro-rated reductions) applies if service is terminated before the end of the first 12 months. Additional restrictions may apply. See Terms of Service for details.
HIGH SPEED INTERNET REQUIRED. †VALID FOR NEW LINES ONLY. RATES EXCLUDE INTERNET SERVICE, SURCHARGES, FEES AND TAXES. DEVICE MAY BE REFURBISHED. If you subscribe to plans with monthly minutes allotments (for example, U.S. & Canada 300), all call minutes placed from both from your home and registered ExtensionsTM phones will count toward your monthly minutes allotment. ExtensionsTM calls made from mobiles use airtime and may incur surcharges, depending on your mobile plan. Alarms, TTY and other systems may not be compatible. Vonage 911 service operates differently than traditional 911. See www.vonage.com/911 for details.
Thinking of signing up for Vonage but have questions? Business and Residential customers can call Toll Free 24 hours a day at: 1-888-692-8074 No Vonage Promotional Codes or Coupon Codes are required at www.vonage.com.
The Vonage Forum provides the Vonage sign up Best Offer Promotion Deal as a means to offset
our cost. If you are considering signing up for Vonage and have found our Vonage
News, Customer Reviews, Forums & all other parts of this site useful, please
use our Vonage FREE Month sign up offer Deal Coupon.
Vonage VoIP Phone Service is redefining communications by offering consumers & small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.38 Seconds and 250 Pages In The Last 60 Seconds The Vonage VoIP Forum
Members
New 
New Today 2
Yesterday 3
Total 64296
Who Is On Site
Visitors 135
Members 0
Total 135
-0.03