Firepower Brute Force Attack Mitigation

[blackswans]

Hi,

How can I block RDP Brute Force attacks with IPS signatures? In fortigate there is a specific signature for blocking rdp brute force attacks. Is there any signature in cisco firepower IPS?

Thanks.

[balaji.bandi]

check this thread may be helpful.

https://community.cisco.com/t5/intrusion-prevention-and/help-detecting-and-blocking-repeated-rdp-failed-logins/td-p/1731975