Jump to content


Photo

Unknown devices showing up in ALE

account lock out examiner lock outs bad password

  • Please log in to reply
1 reply to this topic

#1 AR13

AR13

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 11 December 2018 - 03:30 PM

I'm hoping someone can shed some light here. The issue we are having is that unknown devices are showing up in ALE with bad passwords and lockouts during strange hours of the night. The devices are not pingable (ICMP off?), no DNS records and I cannot get the IP addresses to further track down the suspect devices to their switch ports.

 

Thank you,

AR



#2 Kirill K

Kirill K

    Advanced Member

  • Administrators
  • PipPipPip
  • 75 posts
  • Gender:Male

Posted 11 December 2018 - 03:37 PM

Hi there,

 

ALE provides information based on the events of security event log of a domain controller(s).

 

Probably someone is trying to figure out if there a certain device does exist with a random password.


Best regards,
Support Engineer
 





0 user(s) are reading this topic

0 members, guests, anonymous users