IDS/IPS on ZD admin login

kristijan_fabin — Thu, 17 Dec 2015 08:26:04 GMT

Hi Ruckus team,

could you implement IDS/IPS on ZD so we would know if someone got to ZD and tries to bruteforce admin login username/password. Any chance we could find that in logs and be notified if anyone tried or succeded? Can attacker be prevented somehow?

Re: IDS/IPS on ZD admin login

martin_martin — Thu, 17 Dec 2015 09:22:51 GMT

Hi Kristijan,

You can check under monitor the All events/activities log to see if somebody had tried to login.
as example

correct login
2015/12/17 10:20:37Low Admin[admin] logs in from

Failed tries.

[192.168.10.51]2015/12/17 10:20:32Low Admin[admin] logs in failure from [192.168.10.51]2015/12/17 10:20:29Low Admin[admin] logs in failure from [192.168.10.51]2015/12/17 10:20:25Low Admin[admin] logs in failure from [192.168.10.51]2015/12/17 10:20:22Low Admin[admin] logs in failure from

regards
Martin

topic Re: IDS/IPS on ZD admin login in ZoneDirector

IDS/IPS on ZD admin login

Re: IDS/IPS on ZD admin login