Hello Guys, i have a doubt or consult about this, there is a way to deter brute force attempts that are being seeing against a VPN? I've been getting dozens of those alerts, there is a way to stop it or what could I do to get to the problem.
top of page
All things Palo Alto Networks
Forum: Forum
bottom of page
Are brute force attack attempts, they come from multiple IP's trying to get access to the VPN. I have block the access by country but still I get those attempts. I guess blocking those malicious IPs on the threat signature can work? Just to stop recieving those attempts
What sort of alerts have you seen? If they are in the threat log they should already be dropped or else you may need to tweak your threat prevention profile You could try to pinpoint where the brute force attacks are coming from and try to block access by country or by adding known malicious IP EDLs