XG rdp brute force protction

Hi

ahhh I have found the: Appendix B – IPS - Custom Pattern Syntax ( and the rest of the manual :))

I start really loving this firewall.

I have found on some sites some info I will try as ips signiture in the xg.

it is NOT tested but this is what I found and translated to the xg: content:"|e0|";distance:5;within:1;dstport:3389;flow:from_client;seq:1;offset:1;

I only miss what I can use for the rate limit then it should be complete.

I will go further discover the XG

any tips around this are still very welcome

Jeroen

Jeroen,

XG allows to create custom IPS rules. The appendix has all the info to create custom one. Let us know if you are able to create RDP - Brute force IPS rule and share it.

Thanks.

Hi,

sure I will if you can give me more info about tcp rate limit it could be a succes. I am not a certified tcp ip expert so ...

so far nothing special happend

Jeroen

HI

I tested the portal clientless and works fine ( also trough proxy !)

great alternative, full screen would be more cool, but no this is very fine.

Jeroen

HI

I tested the portal clientless and works fine ( also trough proxy !)

great alternative, full screen would be more cool, but no this is very fine.

Jeroen