AAA, NAC, Guest Access & BYOD

 View Only
last person joined: one year ago 

Solutions for legacy and existing products and solutions, including Clearpass, CPPM, OnBoard, OnGuard, Guest, QuickConnect, AirGroup, and Introspect

Get an email alert from CPPM when we see "n" failed auth within "x" minutes 

Apr 09, 2015 11:04 AM

This article talks about alerting admin ( vai email) if we see "n" number of auth failures within a defined interval.

 

This has been tested on CPPM 6.4 and older.

 

First we need to add SMTP host to insight module for the email alerting to work. Please refer to this article for more information about this.

 

 

Then navigate to Alerts tab  and click on "add Alerts"

 

rtaImage (2).jpg

 

In the above screen capture, please enter the necessary details.

We can select the default template for WebAuth failures also.

Make sure that we use "AND" condition as combination algorithm.

 

The above alert will send an email if CPPM sees 500 radius authentication failures in span of 5 minutes.

Statistics
0 Favorited
4 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.