Host Sweep and TCP port scans
I'm seeing a lot of host sweep and tcp port scans on my firewall logs from internal network to external network addresses. Does anyone know if this is normal behavior of any major application? From what i found, a lot of this scans can be interpreted as false positive because of the way some tabbed browsers behave. How would you interpret this information? Is there any troubleshooting that I could do?