RSA Admin

Windows Events for Unknown Domain

Discussion created by RSA Admin Employee on Sep 3, 2009


    On one customers, I have the alerts to trigger an event for attempts above 15 failed login attempts in 900 seconds, every once in awhile we get events for users not in the domain, but the count is lower.. anyone else seen this? any suggestions, 3.7 is version, SP1..