Alert logs etc.

Alert logs etc.

Alert logs etc.
Alert logs etc.
Sunday - last edited 21 hours ago
Tags: #Logs
Model: OC400  
Hardware Version: V1
Firmware Version:

Hello, I want to go back to logs > alert. I wonder if the information will be more extensive and clearer in the near future. Constantly getting the alert "Gateway Detected Attack
Warning Brama/Rudz Detected TCP SYN packets attack and dropped 188 packets." is starting to get annoying, not to mention the lack of direction. It seems to me that for some reason the provider does not want to provide detailed information for the logs. Sitting at wireshark and analyzing is starting to get troublesome. Please, community, add what else can be added to the log. On my part, it may be worth expanding the widgets with defined alerts. From the logs so quickly to the SSL VPN login because there is none in the logs or none in the logs whether the ACL rules were violated from which address, etc. I believe that something can be done about it.

  0      
  0      
#1
Options
1 Accepted Solution
Re:Alert logs etc.-Solution
21 hours ago - last edited 21 hours ago

Hi  @Pablo_PL 

Thanks for your feedback. This is recorded and the R&D team will consider this.

 

Currently, we only support detecting Ping attackers.

 

But you can refer to the following to configure ACL to protect your network.

"detected WAN Ping attack from xxx.xxx.xxx.xxx"

Recommended Solution
  0  
  0  
#3
Options
3 Reply
Re:Alert logs etc.
Sunday
What is worth adding to the log is on which WAN or LAN port the SYN requests occur
  0  
  0  
#2
Options
Re:Alert logs etc.-Solution
21 hours ago - last edited 21 hours ago

Hi  @Pablo_PL 

Thanks for your feedback. This is recorded and the R&D team will consider this.

 

Currently, we only support detecting Ping attackers.

 

But you can refer to the following to configure ACL to protect your network.

"detected WAN Ping attack from xxx.xxx.xxx.xxx"

Recommended Solution
  0  
  0  
#3
Options
Re:Alert logs etc.
13 hours ago
hello what else to add to the login is settings > Attack Defense. All items checked with a checkbox. From the analysis point of view it is worth knowing if we are protecting something it attacks us Życzę miłego dnia Vincent
  0  
  0  
#4
Options