LIVEcommunity - Who Me Too'd this solution

Automatic remediation of failed logins is something that I always script through the API. The easiest way to do that is creating a custom report on the firewall and using the API to collect the report on a scheduled basis. Have the script parse the IPs that are failing to login and add it to an EDL that you have configured to on the firewall and create a security rulebase entry to drop all traffic from any IP address located within the EDL.

View solution in original post

Who Me Too'd this solution

L0 Member

Me Too date:

Unlock your full community experience!

Who Me Too'd this solution