cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
391
Views
0
Helpful
1
Replies

Denied attackers List

pauloroque
Level 1
Level 1

Hi!

Is it possible to find out why and when a host was included in the "denied attackes" list?

Paulo Roque

1 Reply 1

rhermes
Level 7
Level 7

The sensor's event store has a small fixed size and will wrap after so many messages, but if the event is still in the event store you can find it with the CLI command:

show event alert past 23:59 begin (IP Address)

Review Cisco Networking for a $25 gift card