Sophos Firewall

Discussions How to block randomly login attempts in our Server.

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
+1 person also asked this people also asked this
Locked Locked
Replies 5 replies
Subscribers 29 subscribers
Views 762 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to block randomly login attempts in our Server.

Michael Tusi1 over 2 years ago

How to block randomly login attempts in our Server.

This thread was automatically locked due to age.

Top Replies

jprusch over 2 years ago in reply to Michael Tusi1 +3 verified

Hello Michael, this is very risky to open an RDP access directly. I urge you to stop this as soon as possible. Use a VPN for access to internal servers!

Parents

0 rfcat_vk over 2 years ago

Please provide more details.

1/. XG software version

2/. XG hardware version

3/. server type

4/. are you using WAF and configuration.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 2 years ago

Please provide more details.

1/. XG software version

2/. XG hardware version

3/. server type

4/. are you using WAF and configuration.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Michael Tusi1 over 2 years ago in reply to rfcat_vk

1/. XG software version : SFOS 18.5.4 MR-4-Build418

2/. XG hardware version : Model XGS126

3/. server type : MS SERVER 2016

4/. are you using WAF and configuration. No
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 2 years ago in reply to Michael Tusi1

Where are the attempts originating from? Please post a copy of your firewall rule allowing access to the server.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Tusi1 over 2 years ago in reply to rfcat_vk

from random IP Addresses, in India, Russia, US, and others.

...
Cancel
Vote Up 0 Vote Down

Cancel
+1 jprusch over 2 years ago in reply to Michael Tusi1

Hello Michael,

this is very risky to open an RDP access directly. I urge you to stop this as soon as possible.

Use a VPN for access to internal servers!

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +3 Vote Down

Cancel

Share Feedback

×

Submitted a Tech Support Case lately from the Support Portal?