IDS/IPS on ZD admin login

Question

Hi Ruckus team,

could you implement IDS/IPS on ZD so we would know if someone got to ZD and tries to bruteforce admin login username/password. Any chance we could find that in logs and be notified if anyone tried or succeded? Can attacker be prevented somehow?

martin_martin · Answer

Hi Kristijan,

You can check under monitor the All events/activities log to see if somebody had tried to login.
as example

correct login
2015/12/17  10:20:37Low Admin[admin] logs in from

Failed tries.

[192.168.10.51]2015/12/17  10:20:32Low Admin[admin] logs in failure from [192.168.10.51]2015/12/17  10:20:29Low Admin[admin] logs in failure from [192.168.10.51]2015/12/17  10:20:25Low Admin[admin] logs in failure from [192.168.10.51]2015/12/17  10:20:22Low Admin[admin] logs in failure from

regards
Martin