statmonservice alets 'request from an unauthorized client'

It's basically just a plain 'ol Win2k3 DC with dhcp/dns/wins/ad... it has SNMP so another server can check it's disk space utilization/cpu/etc..but this machine is in the root domain by itself...  The only thing I could guess it would contact the Celerra for, would be to verify the computer account, dns or wins registration, etc...but the alert is coming from the celerra.  One of those things that annoyingly happens every day but finally am getting around to seeing why...:)

Pete

Does your DC have a SNMP client on it, or was it performing some other type of scan?

This can also happen when you are using network intrusion analysis tools.

Well, this certainly is interesting.  The statmonService runs on the Data Mover, and it listens on port 7777.  The service is used to transport Data Mover statistics to the CS.  By default, the service only accepts requests on the private internal network interface (mge0).  The error means that the IP address indicated is attempting to communicate with the Data Mover on port 7777 on an interface other than mge0.

Some service you have running on your Domain Controller is attempting this communication.  If this happens at a regular interval, a network trace should be able to tell you what is being requested and by whom.

You could also try firewalling that port and see if any programs on your network complain (they shouldn't; it's only used internally on the Celerra).

Does it matter that it's a NS500 series gateway celerra on top of a clariion?

No, the model makes little difference.  They all run the same NAS code.

If this happens due to scanning is it possible to configure the system so that alerts are not generated for requests from specific systems?

Take a look at the guide Configuring Events and Notifications on Celerra. You can modify the event configuration file to avoid sending some notifications.

Let us know if that helps!

Karl