https://community.hpe.com/t5/server-management-systems/hp-insight-intrusion-blocking/m-p/4790076#M43752 are you using global or multiple discovery credentials?<BR /><BR />Other causes could be you detection software configuration being set too sensitive. <BR /><BR />If you look it the software logs you may find the offending protocol or something to allow you to get more specific such as how far apart are the logged events which could point to a running scheduled task, like daily identification, status polling, etc. Fri, 20 May 2011 15:05:31 GMT jim goodman 2011-05-20T15:05:31Z https://community.hpe.com/t5/server-management-systems/hp-insight-intrusion-blocking/m-p/4790075#M43751 I found that if I disable hp systems insight mgnt service on a domain server I do not receive daily intrusion detection error from workstations. I am uncertain why this is so, and wonder if a setting within insight is appropriate so this service can stay running without conflict. Thu, 19 May 2011 21:32:10 GMT https://community.hpe.com/t5/server-management-systems/hp-insight-intrusion-blocking/m-p/4790075#M43751 nmbrian 2011-05-19T21:32:10Z https://community.hpe.com/t5/server-management-systems/hp-insight-intrusion-blocking/m-p/4790076#M43752 are you using global or multiple discovery credentials?<BR /><BR />Other causes could be you detection software configuration being set too sensitive. <BR /><BR />If you look it the software logs you may find the offending protocol or something to allow you to get more specific such as how far apart are the logged events which could point to a running scheduled task, like daily identification, status polling, etc. Fri, 20 May 2011 15:05:31 GMT https://community.hpe.com/t5/server-management-systems/hp-insight-intrusion-blocking/m-p/4790076#M43752 jim goodman 2011-05-20T15:05:31Z