cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

IPS signature to block brute force attempt

hector.ricapa
Beginner
Beginner

Hello all,

We have an Outlook web access server and I would like to block an attemt of bruteforcing its login page (SSL enabled). Is there any signature that can accomplish this?

Thanks in advance

1 REPLY 1

nicksmi
Cisco Employee
Cisco Employee

We could create a signature to detect this type of activity.  The only problem is that one person's brute force is another's average day, in terms of network traffic.  Any such signature would have to be highly tuned for the enviornment it is deployed in.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: