- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: Credential Guessing Event in SmartEvent
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Credential Guessing Event in SmartEvent
Dear All,
Anyone had come across on the below Events:
We have SmartEvent (Both R77.x & R80.x) in same machine of Management server.
We have enabled Event Policy - "Unauthorized Entry" - "Credential Guessing" to generate events of 3 failures within 600 Seconds.
We are receiving Events on the above as well which is fine.
But we have different info on the above "Credential Guessing" Event Log.
Example: We have Internal Server (Windows 2012) and we tried to SSH into Firewall from this Server.
For few wrong attempts as per Event Detection - we get Events.
But the Event "Product" says "Linux OS" instead of "Windows OS"
(Attached screenshot)
Regards, Prabulingam
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Why attach a Word document instead of an image ???
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This in fact is correct - a Linux device has reported the Credential Guessing Event in SmartEvent as GAIA is based on RedHat Linux. This does not characterize the hacker OS but the devices OS where the issue Credential Guessing occurred 8).
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dear G_W_Albrecht,
Thanks for your inputs, this helps me to inform the customer for clearing on Linux OS.
Regards, Prabu
