Security

Reply
New Contributor

Event Login Reject

Hi,

 

I'm getting an unknown event on the ClearPass access tracker, which shows Event login reject without any more information?!

This log keeps repeating and i don't know how to get rid of it....

 

01.jpg

i alos attached the export log.

Re: Event Login Reject

I have seen this in the past, and have an idication that it is from the Ingress Event Engine and related with a port-scan on your ClearPass appliance on the syslog port; which could be originating even from your ClearPass if you enabled the subnet scans. I have not further investigated yet myself.

 

If you don't use Ingress Event Engine, turn it off [in server manager]

Try to find where the scans on the syslog port may be originating from and try to disable it there; if it is your ClearPass subnet scan, disable it for the network where your ClearPass lives.

Open a case with your partner or Aruba Support (TAC) if you can't find the source.

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).
New Contributor

Re: Event Login Reject

Hi Herman,

 

Thank you for your quick replay and great support,

this was indeed the problem and i fixed it.

 

Cheers,

Tal

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: