1 reply to this topic

[AR13]

I'm hoping someone can shed some light here. The issue we are having is that unknown devices are showing up in ALE with bad passwords and lockouts during strange hours of the night. The devices are not pingable (ICMP off?), no DNS records and I cannot get the IP addresses to further track down the suspect devices to their switch ports.

 

Thank you,

AR

[Kirill K]

Hi there,

 

ALE provides information based on the events of security event log of a domain controller(s).

 

Probably someone is trying to figure out if there a certain device does exist with a random password.