Port 22 Non-SSH Traffic Detection

Info

Synopsis

The remote client appears to be tunneling data over port 22 TCP (SSH)

Description

The remote host is running non-SSH traffic over port 22. Port 22 is a port that is typically allowed outbound access via a firewall. Because of this, some users may attempt to pass non-SSH traffic over port 22.

Solution

Ensure that this application is authorized for your network