This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to block WAN IP

Dear All i am getting continuous alert massage from my device which is follows.

 

Alert for XG210 (SFOS 17.5.11 MR-11.HF052220.1) C230764FY2Q6DBB
Device Information:
Hostname: C230764FY2Q6DBB
Date/Time: 2020-05-27 17:08:47
Alert ID: 17507
Message:
User 'root' failed to login from '218.92.0.192' using ssh because of wrong credentials


This thread was automatically locked due to age.
Parents Reply Children
  • FormerMember
    0 FormerMember in reply to Rajiv SIngh

    Hi  

    You are getting alerts from the firewall because SSH is allowed on the WAN zone. That means this service is available on the internet. 

    If you need to access your firewall via SSH from the internet, consider creating Local ACL exception with source public IP and remove SSH access from the WAN zone.

    Thanks,