Where to find WIPS logs

[philip_francis1]

Hello, I have a device that is constantly getting blocked by WIPS i.e. "Temporarily block wireless clients with repeated authentication failures for x"

Which log settings do I need to configure to see logs pertaining to this WIPS block ?
Thank you kindly.

[ken_liu_dlob4xe]

Hi Philip,
Which ZD version are you using? It would be shown in "All Events/Activities" by default.
It's a "High" level event for Severity.

User[xx:xx:xx:xx:xx:xx] fails authentication too many times in a row when joining WLAN[XXX] at AP[XXX]. User[XXX] is temporarily blocked from the system for [X seconds].