Author Topic: Old alarm keep appearing on my SSH connection?  (Read 429 times)

pswolfwind

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Old alarm keep appearing on my SSH connection?
« on: October 25, 2016, 01:20:37 am »
Recently I've got a SSG firewall keep popping these alarms:
"ALARM [ID 1]: Login attempt to system by admin XXX...
ALARM [ID 2]: Login attempt to system by admin XXX...
ALARM [ID 3]: Login attempt to system by admin XXX...
ALARM [ID 4]: Login attempt to system by admin XXX...
ALARM [ID 5]: Login attempt to system by admin XXX...
ALARM [ID 6]: Login attempt to system by admin XXX...
ALARM [ID 7]: Login attempt to system by admin XXX...
ALARM [ID 8]: Login attempt to system by admin XXX...
ALARM [ID 9]: Login attempt to system by admin XXX..."

Strange thing is that I can't see this login attempts alarm or event on the WebUI, it only keep reappearing on my SSH connection.

Then I tried to login another SSG firewall with wrong password, and now below alarm keep appearing on my SSH connection to this firewall too!
"ALARM [ID 1]: Multiple login failures occurred for..."

This time I see a few lines of login failure on the WebUI but it will not keep reappearing like it does on the CLI. Can anyone tell me how to stop the warning on CLI? Also is there a way to set the firewall to display the whole line of warning on CLI? Thanks