Denied attackers List

Unanswered Question
Jul 17th, 2009

Hi!

Is it possible to find out why and when a host was included in the "denied attackes" list?

Paulo Roque

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
rhermes Fri, 07/17/2009 - 07:58

The sensor's event store has a small fixed size and will wrap after so many messages, but if the event is still in the event store you can find it with the CLI command:

show event alert past 23:59 begin (IP Address)

Actions

This Discussion