Hi there.
Is there a chance to detect SSH brutforce to Servers in the DMZ by
Checkpoint?
For example blocking a specific IP after 3 SSH connections in 1 Minute?
I thoght about using SmartDefense "Successive Events", but there I can't
specify a Server..
I have NGX R61, is there something that can help me? Is there something
in the newer Versions?
I'd like to avoid implementing such a Blocker on the DMZ Servers, wich
of course is possible.
Thx for help!
regards Markus
--
http://schmidt.bs-server.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
