The remote host seems to be a Checkpoint FireWall-1 running SecuRemote. The SecuRemote service contains a vulnerability that allows attackers to gain information about the hosts, networks, and users configured on the Firewall. This will enable attackers to focus their attack strategy. You should not let this information leak out.

Either block the SecuRemote's ports (TCP 256 and 264) to untrusted networks, or upgrade to the latest version of Checkpoint's Firewall-1. Workaround: You could restrict the topology download, so that only authenticated users can download it. Go to Policy Properties Desktop Security of your Policy Editor and uncheck 'respond to unauthenticated topology requests'. After installing the Policy only authenticated Users can download the Topology. Reference : http://online.securityfocus.com/archive/1/197566 http://online.securityfocus.com/bid/3058 For More Information: http://www.securiteam.com/securitynews/5HP0D2A4UC.html