Braodcast packets from UPS to all of network

[Anonymous user]

Hello,

After recently updating changing all our client computers to Sophos Endpoint Protection I have noticed in the firewall logs that our UPS's network card IP (10.35.90.10) is constantly broadcasting packets, every 30 seconds 24/7 to the whole network (10.35.255.255). The packets are UDP from remote port 35325 to local port 3052. (Screenshot attached)

The UPS in question is a APC Smart UPS SURT5000XL (firmware 451.17.W) with a AP9619 card (Hardware Revision A10). PCNS has recently been updated to PCNS 3.1 on every server; tested communication to each server IP without issue.

I know port 3052 is required to be open to allow it to communicate with PCNS on my servers (which do not have Sophos firewall on btw and the ports are open to allow communication) but why is it broadcasting to the whole network and not just the server IPs I have set it up with? Is there anything I can do to stop this?

Thanks,

Dave

[BillP · Accepted solution]

Does this help explain things? It is an application note explaining the communication process of PowerChute Network Shutdown (and what the NMC does as well)

http://www.apcmedia.com/salestools/TDOY-5UQVBV/TDOY-5UQVBV_R3_EN.pdf