Results 1 to 5 of 5
  1. #1
    Untanglit
    Join Date
    Oct 2016
    Posts
    17

    Default RDP ALERTS in Port forwarding

    hi,
    I have installed last versión of Untangle and i don't receive alerts intrusión of RDP like previous versión. In previous versión i received intrusión activity on RDP protocol but no in this vesion although the alert rule is created by default and in the reports I can see a lot of activity and access attempts by that protocol.

    someone can help me with this.

    thanks

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    6,662

    Default

    Post your Alert rule.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Untangle Ninja jcoehoorn's Avatar
    Join Date
    Mar 2010
    Location
    York, NE
    Posts
    1,504

    Default

    Oooooh, I like this!

    RDP on the public interface is not good practice... like really, really bad. But... I admit it's so useful I do it, too. I already added a separate rule to block this from outside the US back when they added geo-location, and that helped a ton. Getting an alert every time it's used is a great idea, too.
    Five time Microsoft ASP.Net MVP managing a Lenovo RD330 / E5-2420 / 16GB with Untangle 13.1 to protect 700Mbits for ~400 residential college students and associated staff and faculty

  4. #4
    Untanglit
    Join Date
    Oct 2016
    Posts
    17

    Default

    It is the alert that is by default in the untangle in the events.
    Class: SessionEvent
    sServerPort = 3389
    Exceeds Threshold Limit: 20
    Over TimeFrame: 60
    Grouping Field: CClientAddr

  5. #5
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,177

    Default

    That's only going to alert if you rdp somewhere more than 20 times in 60 seconds. Is that what you want?

    Sent from my Nexus 6P using Tapatalk
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2